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‘The biggest leak in the history of data journalism’ Edward Snowden The inside 
story from the journalists who set the investigation in motion. 


Late one evening, investigative journalist Bastian Obermayer receives an 
anonymous message offering him access to secret data. Through encrypted 
channels, he then receives documents showing a mysterious bank transfer for 
$500 million in gold. This is just the beginning. 


Obermayer and fellow Süddeutsche Zeitung journalist Frederik Obermaier find 
themselves immersed in a secret world where complex networks of shell 
companies help to hide those who don’t want to be found. Faced with the largest 
data leak in history, they activate an international network of journalists to 
follow every possible line of enquiry. Operating for over a year in the strictest 
secrecy, they uncover a global elite living by a different set of rules: prime 
ministers, dictators, oligarchs, princelings, sports officials, big banks, arms 
smugglers, mafiosi, diamond miners, art dealers and celebrities. The real-life 
thriller behind the story of the century, The Panama Papers is an intense, 
unputdownable account that blows their secret world wide open. 
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FOREWORD 


There are moments in history when a big truth is suddenly revealed. In 2010 
leaked US diplomatic cables showed the White House’s private thinking about 
its friends and enemies. Three years later a contractor working for the National 
Security Agency exposed how the US and the UK are secretly spying on their 
own citizens. 

His name was Edward Snowden. We learned that spooks from Britain’s 
listening station GCHQ could — if they wanted — bug your iPhone. Or remotely 
activate your laptop web camera. Snowden’s revelations caused outrage and 
started a global conversation about the boundaries of privacy in a digital age. 
Except in Britain, land of James Bond, where many met his revelations with a 
complacent shrug. 

In April 2016 something else hidden in plain sight was exposed. Namely that 
the secret offshore industry — centred in tax havens like the British Virgin 
Islands — was not, as had been previously thought, a minor part of our economic 
system. Rather it was the system. Those who dutifully paid their taxes were, in 
fact, dupes. The rich, it turned out, had exited from the messy business of tax 
long ago. 

The journalists who unearthed this bitter truth were Bastian Obermayer and 
Frederik Obermaier of Germany’s Stiddeutsche Zeitung. (They are not related 
but their German and international colleagues fondly nickname them the 
‘Brothers Obermay/ier’.) The paper, based in Munich, has an excellent track 
record of working on difficult and important investigations. 

Reporters often get offered information, stuff. Generally, it turns out to be 
disappointing. As Obermayer recounts, in early 2015, late one evening, he 
received an anonymous message. It said: ‘Hello. This is John doe. Interested in 
data?’ Obermayer replied: ‘We’re very interested, of course.’ 

The data turned out to be bigger than anyone might have imagined. The source 
— his or her identity remains unknown — had got hold of the entire internal 
database of a major Panamanian law firm. The firm’s name was Mossack 
Fonseca. It specialized in setting up anonymous offshore shell companies. 

The motivation here was simple. Like Snowden, the source wanted to expose 


criminal wrongdoing among the firm’s shadowy clients. The leak was an act of 
bravery. It eventually amounted to 11.5 million documents, delivered in real- 
time instalments. It was the biggest leak ever, and far larger than the top-secret 
Snowden Files or US State Department cables. 

It included the records of 214,000 offshore companies, names of real or 
‘beneficial’ owners, and passport scans. There were bank statements. And email 
chains. Often these were between Mossack Fonseca’s head office in Panama and 
‘intermediaries’, typically other lawyers, accountants and banks. And from the 
firm’s branches in UK crown dependencies like Jersey or the Isle of Man. 

What followed was a thrilling and secret year-long journalistic collaboration 
across more than eighty countries. The Süddeutsche Zeitung shared its material 
with the International Consortium of Investigative Journalists, the ICIJ, which is 
based in Washington DC. The ICIJ in turn gave access to the data to 100 media 
organizations across the planet. In Britain that was my newspaper, the Guardian, 
and the BBC. 

The journalists gave the leaked files a name. They were the Panama Papers. 
The name was a conscious echo of the Pentagon Papers: volumes of secret 
documents leaked in 1971 by Daniel Ellsberg that lifted the lid on the US war in 
Vietnam. 

I found myself back in the Guardian’s investigations ‘bunker’. Actually, it had 
a bucolic view of Regent’s Canal in London: houseboats, joggers, coots. In 2013 
I’d been part of a small group that had studied the Snowden Files here. This 
project was different. Via a secure platform, called the iHub, journalists were 
encouraged not to compete with each other but to share information actively and 
to swap leads and tips. We did, in a flurry of encrypted emails. 

For some time the global media industry has been in a state of gloom. 
Newsrooms are downsizing; the ad market has collapsed. Suddenly, though, this 
counter-intuitive model of cooperation looked like the way to go at a time when 
media organizations were broke. Paradoxically, it felt to us like a golden age for 
investigative journalism. The leaks kept coming. And grew bigger: in this case, 
an astonishing 2.6 terabytes. 

But would anyone care? By 2016 almost 400 journalists were working secretly 
on the story, with an agreed publication date of 3 April. Clandestine group 
meetings had taken place in Washington, Munich and London. There were two 
concerns. One, that the leak might itself leak — that someone would accidentally 
bust the embargo. The other was that the public would respond to the Panama 
Papers with an indifferent yawn. 


We needn’t have worried. In Iceland the prime minister resigned. In Argentina 
there were demonstrations. In Azerbaijan a small war was initiated — so some 
believed — to distract from revelations featuring the president and his daughters. 
In China censors blocked the words ‘Panama Papers’ and jammed the website of 
the Guardian. In Russia aides to Vladimir Putin fumed about a Western ‘spy’ 
conspiracy. 

In Britain, meanwhile, David Cameron experienced the worst week of his 
premiership. The Panama Papers revealed that the offshore fund run by 
Cameron’s late father Ian had paid no British tax. For three decades. The fund, 
Blairmore Holdings Inc, had gone to absurd lengths to pretend it was based in 
the Bahamas. It hired a small army of Bahamas residents to sign paperwork, 
including a part-time bishop. 

Downing Street refused to answer questions about Cameron’s tax affairs, 
saying they were a ‘private matter’. Eventually Cameron came clean: he’d 
owned shares in Dad’s tax haven fund. He sold them for £31,500 just before 
becoming prime minister in 2010. Cameron was reluctant to acknowledge what 
was obvious: that his family’s fortune — legally of course — came from privileged 
offshore wealth. 

It’s too early to say whether the Panama Papers will usher in a new era of 
transparency. The G20 has promised to act. Cameron, George Osborne and 
Jeremy Corbyn all published their tax returns — a start. But as US president 
Barack Obama noted, tax avoidance is a huge global problem. It’s made worse, 
Obama said correctly, by the fact that using offshore structures is perfectly legal. 

Still, the past few months have seen a victory of sorts for those of us, the little 
people, who do pay our taxes. From now on, the super-rich and other characters 
who use exotic offshore structures will be a nervous bunch. How long, they must 
be wondering, before the next leak? 


Luke Harding 
London, May 2016 
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VLADIMIR PUTIN’S MYSTERIOUS FRIEND 


There’s a lot of money at stake. That is about the only thing we realize 
immediately as we battle our way through the folders of the three offshore 
companies featuring Sergei Roldugin’s name. The folders contain hundreds of 
documents, many with page after page of descriptions of share deals it would 
take us weeks to understand. Yet even in our ignorance we are capable of 
picking out the sums, and they take our breath away. Here a loan for a few 
hundred million US dollars, there another one for many billions of rubles. 
Millions of dollars in ‘advisory fees’ flow from shell company to shell company, 
and the documents suggest that share packages worth millions change hands 
twice within twenty-four hours. 

We read in the share transaction contracts that some of the deals involve shares 
in major Russian companies. The fact that these particular companies show up 
here doesn’t necessarily mean anything, but it may do. Virtually every Russian 
expert critical of Putin assumes that he’ll leave office as a multi-billionaire — if, 
that is, he ever does leave office. But where has he stashed his fortune? There is 
a theory among experts that he gets companies to allocate him shares — 
companies such as the ones we have just found. 

If Putin did indeed own shares in major Russian companies, would he really 
want people to know about it? Would he hold them under his own name? 
Certainly not. So then he would need people he could trust. People like Sergei 
Roldugin? 

We know quite a lot about the two men’s relationship, particularly because 
Roldugin, the virtuoso cellist, is not exactly shy about it. He enjoys talking to 
journalists and authors about Putin, and of course he gives the president good 
press. He would be badly advised to do anything else. 

The two men have known each other since the 1970s. Roldugin is one of 
Putin’s circle of friends from his time in St Petersburg — people that Putin later 
made very, very wealthy. It is therefore conceivable that Roldugin does only 
represent Roldugin here, for he has owned a small stake in a St Petersburg 
private bank, Rossiya Bank, since the 1990s. Under Putin’s protection it has 


grown into one of the largest and most influential banks in the country. Putin 
made sure that various state enterprises took their money to Rossiya Bank, 
which in tur belongs for the most part to other Putin confidants besides 
Roldugin. 

Most of these confidants, by the way, are on the US sanctions list announced 
after Putin’s annexation of the Crimea. Rossiya Bank itself is on the list as the 
bank of ‘Putin’s innermost circle’, according to the rationale. Managers of 
precisely this bank administrated several offshore companies ordered from 
Mossack Fonseca, including two of the three companies for which Sergei 
Roldugin is named as either a shareholder or the owner. This of course means 
that Mossack Fonseca is doing business with managers of a company that is 
subject to US sanctions. This is a gamble with wide-ranging potential 
consequences. Should the US authorities judge that there has been a breach of 
sanctions, they could freeze the assets of Mossfon’s subsidiary in the USA, and 
its owners and executives would no longer be able to travel to the United States 
without fear of arrest. In the worst-case scenario, Mossfon itself might end up on 
the US sanctions list. 

The precise structure of the Roldugin system would appear to be as follows. A 
Rossiya Bank representative has a sort of power of attorney in most of the 
companies, and is thus the contact for a Zurich-based law firm. In turn, this law 
firm is officially responsible for the offshore companies set up by Mossack 
Fonseca and informs Mossfon of the end clients’ wishes. Mossack Fonseca’s 
Geneva subsidiary handles the Zurich law firm. So if Mossack Fonseca in 
Panama has a question, it turns to its Geneva office, the people in Geneva ask 
the Zurich lawyers and they get in touch with Rossiya Bank. It’s a long process, 
but it’s also a practical one, for should the overall set-up come under scrutiny, 
Mossack Fonseca could argue that it was merely doing business with a reputable 
Swiss law firm. What is the world coming to if you can’t even trust the Swiss! 

From previous years’ emails it is clear that Mossack Fonseca was fully aware 
of Rossiya Bank’s involvement at the other end of the chain. The critical 
question as far as we’re concerned is whether Sergei Roldugin and the other men 
in his network were really acting on their own initiative. He does state in one 
document that he is the sole and real owner of at least one of these firms, a 
company by the name of International Media Overseas S.A. based in Panama. 
This is in papers Roldugin provides when applying for an account with the 
Zurich branch of a Russian bank in May 2014, only weeks after the US 
announced its sanctions against Rossiya Bank. 


Roldugin declares in the questionnaire that the company’s assets run into 
billions of rubles, the first transfer will be for 5 million Swiss francs and he 
expects a long-term income of over 1 million Swiss francs per year. This is the 
self-same Roldugin who announced to the New York Times a few months later 
that he didn’t ‘have millions’ and wasn’t a businessman. 

Roldugin also explains to the bank where International Media Overseas S.A.’s 
money comes from, stating that the company owns a 100 per cent stake in a 
certain Med Media Network Ltd (as indeed it does). Med Media was mentioned 
in the same New York Times interview with Roldugin. According to the 
newspaper, the company owns a 20 per cent stake in a major Russian media 
company called Video International. What the NYT reporters didn’t realize was 
that there is a link: Roldugin is also one of Video International’s owners. On 
paper, at least. 

We decide to examine the ownership of Video International in more detail, but 
we defer this task for a little while. More accessible, and at the same time more 
entertaining, is a questionnaire completed to open an account for one of 
Roldugin’s companies with the aforementioned bank in Switzerland. One of the 
questions is: Is the owner of the company a politically exposed person (PEP) or 
a very important person (VIP)? 

Roldugin answers no. 

Does the owner have any relationship with a PEP or a VIP? 

Roldugin again answers no. 

This second answer is a barefaced lie. The best friend of the Russian president, 
who also happens to be godfather to the president’s daughter, cannot seriously 
deny having ‘any relationship’ with VIPs or a politically exposed person. 

Nowadays, banks systematically enquire about this kind of relationship 
because the experience of recent decades has shown that most corrupt politicians 
do not declare their secret bank accounts in their own names but rather in the 
name of a trusted relative or friend. However, the risk of the bank being regarded 
as an abetter of thieving heads of state is almost as high, and banks therefore 
want to find out more about their clients as part of the anti-money laundering 
drive and the related ‘Know Your Customer’ policy. Of course, they may 
ultimately decide to accept a customer who is the best friend of a politician, but 
they must know what they’re doing — in part because they might later be called 
upon to justify their decision. 


[] 


As we try to follow the Russian trails, the files keep growing, gigabyte after 
gigabyte. It’s not easy to transfer such large volumes of data, and it’s even more 
time-consuming if you also wish to encrypt the information. Then we have the 
additional problem that our source insists on absolute anonymity, which only 
complicates matters further. 

The solution we find after many weeks of head-scratching is awkward but 
relatively secure. We cannot describe it for reasons of confidentiality. Slowly but 
surely, the data makes its way to us. Yet as we torment ourselves with technical 
issues, a single question keeps worming its way into our minds: why would 
anyone run the risk of passing on such sensitive data for no benefit? 

There’s obviously no money, but there’s also no fame for someone who 
chooses to remain anonymous. There is danger, though. 


[SZ]: Why are you taking this risk? 

[john doe]: I can’t explain my rationale without making my identity clear. But generally speaking, I 
feel that I must do it because I’m able. It’s too important. There is just a mind-boggling amount of 
criminal activity going on here — I struggle to even wrap my head around it. 

[SZ]: Aren’t you afraid? 

[john doe]: Definitely. But I am trying to be careful. 


Some days we write to each other virtually non-stop via a variety of anonymous, 
encrypted chats. It’s generally about technical issues. Have we received folder 
XY? Do we know this or that file format? Otherwise we talk about politics, 
about Angela Merkel and Greece, about Chavez, Putin, Obama and China, or 
about our source’s fears. Then we return to discussing gigabytes. 

What we don’t realize in these first few weeks, however, is that it’s going to 
continue like this for months. For months and months. 


[] 


After a preliminary examination we set the Argentinian documents aside. The 
public prosecutor has identified 123 companies that all seem to have been 
founded by Mossack Fonseca. That is more than we can handle, certainly now 
and perhaps ever. However interesting the story might be, we must naturally 
focus our attention on major German scoops. 

At the same time, we don’t want the stories to be ignored or lost in countries 
where they might be of interest. 

That is a compelling argument for a large-scale international collaboration of 
the kind we participated in during Offshore Secrets, the Luxembourg Tax Files 
and the HSBC Files. 


Of course we promised our source that we would try to get the New York 
Times on board, even if we’re not likely to be successful at the first attempt. 

We call Gerard Ryle, the director of the Washington-based International 
Consortium for Investigative Journalists, to capture his imagination for our data. 
The ICIJ is a sort of international club of investigative journalists that you can 
only join by nomination and invitation. Something like 200 of our colleagues 
worldwide now belong to this club, and we became members in 2013. To be 
precise, the ICIJ is an initiative of the Center for Public Integrity (CPI), an 
American non-profit organization for investigative journalism. The CPI was set 
up by Charles Lewis, a leading US investigative reporter responsible for 
countless successes over the past thirty years. Both the CPI and the ICIJ are 
financed by donations, one of their main donors being the left-leaning billionaire 
George Soros. 

Since it was founded in 1997, the ICIJ has coordinated joint cross-border 
investigations into global tobacco trafficking, the international trade in body 
parts and questionable World Bank projects. The idea behind the ICIJ is that 
journalists achieve more by sharing their material when it is of international 
relevance. This results in more and better stories, because they are handled by 
experts in a particular field, often the best investigative reporters in a specific 
country. Our colleagues from Argentina’s La Nacion, for example, are deeply 
involved in the case of NML, the hedge fund that is suing the Argentinian state. 
We have seen online that the newspaper has been writing about this affair for 
years, whereas we are starting from scratch. 

Our telephone conversation with Gerard Ryle goes well. After a quarter of an 
hour he’s determined to make it an ICIJ story, even though we cannot name any 
names on the phone and can only hint at Mossack Fonseca’s implication. 

It’s important to say that Gerard Ryle has a soft spot for shell companies. 
When he took up his position as ICIJ director in 2011, he brought with him a 
hard drive containing the largest leak any journalist had ever been party to until 
then. He had been handed 260 gigabytes of information from the inner sanctum 
of two firms called Portcullis TrustNet and Commonwealth Trust Ltd. The core 
business of these two firms was — exactly like Mossack Fonseca’s — to sell shell 
companies. It is no exaggeration to say that Gerard Ryle produced a worldwide 
scoop from that data. In April 2013, under the headline ‘Offshore Secrets’, 
nearly 100 journalists from some fifty countries revealed how the world’s rich 
and powerful used these offshore companies to cover their tracks and hide their 
true assets. In Germany we worked on the story for the Stiddeutsche Zeitung 


along with our colleagues at the Norddeutscher Rundfunk radio station. The 
basic model of our data is therefore very similar to that of Offshore Secrets, 
although we have far less — about 50 gigabytes — when we ring Ryle. However, 
we have the feeling that our data on individual companies is more 
comprehensive and, above all, more up to date. During the Offshore Secrets 
investigations in 2013 we published information gleaned from files dated 2010 
or earlier. This time we note with a shudder that we keep finding fresh emails, 
which means that our source has had access to internal Mossack Fonseca data 
until very recently. Possibly, indeed probably, the source still has such access. 

At the end of our conversation Gerard Ryle promises to fly to Munich in the 
next few weeks to see the files with his own eyes. 

Almost accidentally, during one of our evening browsing sessions, we stumble 
upon something that we had overlooked until now. There are several documents 
containing internal memos about many of the brokers, i.e. the banks or asset 
managers. The general secretiveness of Mossfon staff — abbreviated client names 
and codenames — suggests that there is something fishy going on,+ but what we 
read in these memos is of a quite different tenor. They mention brokers with 
‘large numbers of clients with undeclared accounts’, a law firm with ‘a separate 
department for illegal funds’ and that Mossack Fonseca ‘offers solutions’ for 
withholding tax on payments of interest in Europe. 

Reading this, we know we’re on the right track. If we can prove that Mossack 
Fonseca knowingly helped its clients to evade tax, the law firm will have a real 
headache. At this juncture we ask ourselves whether Mossack Fonseca has ever 
been prosecuted for a similar crime, but find no evidence of any lawsuits against 
the firm. 

Around now we become aware of a fact that sucks our attention away from 
everything else. It concerns the man who made all this secret business possible 
in the first place and who must have earned an absolute fortune in the process. 
He is the man who founded Mossack Fonseca, a law firm that has apparently 
entertained dealings with criminals of all stripes for several decades. 

His name is Jürgen Mossack. He’s German. 


MOSSACK FONSECA’S ROLE IN THE 
SYRIAN WAR 


It’s uncanny. 

When we look at our files we keep coming across emails that are only a few 
days old. It’s almost as if we were following events in real time, as if we were 
inside the law firm that provides assistance to so many criminals. As if we were 
standing behind the employees in Panama City, whose names are now so 
familiar to us, and looking over their shoulders at their screens. 

Except that they cannot see us. 

It’s even more uncanny when these emails mention us — us at the Süddeutsche 
Zeitung. For example, in an email dated 9 March 2015, in which members of the 
law firm’s staff forward to their colleagues our article about the raid on 
Commerzbank and Mossack Fonseca’s involvement — more or less accurately 
transposed into Spanish by Google Translate. Or the email dated 19 February 
2015, in which someone asks whether it’s true that the convicted drug dealer 
Arturo del Tiempo Marqués is a Mossfon client. Some journalists had enquired 
about him the day before, it says. Those journalists were us. 

So now we know that Panama is reading what we publish. But they don’t 
know that we are reading their emails. . . 

We shudder at the sight of an email from Mossack Fonseca’s marketing 
department, warning about ‘undercover journalists’. It urges all Mossfon staff to 
be vigilant. 

In addition, we happen upon the agenda of the April 2015 Mossfon Corporate 
Strategy Meeting. The second item is ‘Mossfon in the media’ and ‘the German 
case’. It’s obviously us that they have in mind. 

Mossfon appears to realize that the media are critical of its line of business — 
and for good reason. 


[john doe]: Good morning. 
[SZ]: Hello. All good? 
[john doe]: So far. More data is on the go. 


[SZ]: Okay 

[john doe]: I think there are some companies in there that have a connection to the Syrian dictator, 
Assad. 

[SZ]: We know the rumors that Mossfon allegedly worked for Assads people. 

[john doe]: The rumors seem to be true. 

[SZ]: Do you have company names? 

[john doe]: Some. This should be a good start: Ramak Ltd., Dorling International Ltd., Cara 
Corporation, Seadale International Corporation, Hoxim Lane Management Corp., Lorie Limited, Drex 
Technologies S.A. 


The last of these companies, Drex Technologies, sounds familiar. It already 
turned up in the HSBC Files. In our data we find a Drex Technologies S.A. 
folder numbered 537658 — Mossfon’s internal reference. The folder contains 124 
files: PDFs, emails, Word documents and photos. 

This is the first genuine lead pointing towards Syria’s dictator Bashar al- 
Assad. We examine the companies more closely, continue our investigations, 
and bingo! Mossack Fonseca apparently ran a whole web of shell companies 
associated with the brutal Syrian regime. 

To make things clear: for obvious reasons, Assad is not mentioned in the 
documents, either as an owner or a director. Just try setting up an account or a 
company outside Syria in the name of Bashar al-Assad; it won’t work. Dictators, 
mafia bosses and other criminals have so-called ‘bagmen’ for this kind of job. 
These are the foot soldiers who collect, manage and invest money for secretive 
bigwigs and bring it wherever it is needed. 

Of the hundreds of thousands of Syrians fleeing their country, a large 
proportion are not running from so-called Islamic State but from Assad. Backers 
such as Mossack Fonseca and Assad’s bagmen make sure that the regime 
doesn’t run out of foreign currency. This cash serves to pay mercenaries and 
equip the dreaded Shabiha militia with weapons and vehicles, as well as 
allegedly enabling the production of poison gas and the operation of torture 
facilities. 

We find the name of Rami Makhlouf, Assad’s most important financier, 
dozens of times in our files. This is a man abhorred by the Syrian opposition. 
When the first protests broke out in 2011, the demonstrators didn’t just burn 
pictures of Assad; they also destroyed branches of the telephone corporation 
Syriatel. Rami Makhlouf is Syriatel’s owner. ‘Makhlouf is a thief!’ they cried. 

Rami Makhlouf is probably the richest man in Syria. As well as Syriatel he 
also holds stakes in various banks, duty-free chain stores, an airline and much 
more. People in Syria have long since stopped asking what belongs to him and 


instead ask: what doesn’t? 

The New York Times wrote that Makhlouf was a ‘symbol of how economic 
reforms turned crony socialism into crony capitalism, making the poor poorer 
and the connected rich fantastically wealthier’. 

Rami Makhlouf, who was born in Damascus in 1969, is Bashar al-Assad’s 
cousin. Makhlouf’s aunt Anisa is the widow of the late president Hafis al-Assad, 
the current ruler’s father. Rami and Bashar played together when they were 
young, and today they are close allies — one the head of state, the other the 
businessman on whose money and connections Assad can count at all times. The 
US State Department classifies Rami Makhlouf as a ‘financier of the regime’, as 
one can read in a diplomatic cable sent in 2007 that was published by 
WikiLeaks. 

As far as anyone can tell, Makhlouf’s wealth has less to do with diligence and 
hard work than with unscrupulousness and brutality. ‘Rami Makhlouf has used 
intimidation and his close ties to the Assad regime to obtain improper business 
advantages at the expense of ordinary Syrians,’ said Stuart Levey in 2008, who 
was under-secretary for terrorism and financial intelligence at the US 
Department of the Treasury and who, in an ironic twist, now works for HSBC — 
the very bank that the ICIJ’s HSBC Files investigation revealed had done 
business with Makhlouf for many years. In any case, Rami Makhlouf’s ties to 
Assad are no secret. He is one of the regime’s strongest backers — and as such, 
an international pariah with whom no one will do business. 

Mossack Fonseca appeared to think differently. The law firm worked for years 
with the man who is said to shuttle back and forth between Dubai and 
Damascus, and understandably doesn’t show his face in public in Syria. 


[] 


The oldest firm belonging to Makhlouf we can find in the data is called Ramak 
Ltd and was founded in 1996 in the British Virgin Islands. Makhlouf is only in 
his mid-twenties at the time. He takes over a string of Syrian companies, gets the 
better of his rival bidders and becomes richer and richer. The protecting hand of 
Assad’s family is always over him. According to the US authorities, Makhlouf 
had in this way ‘improperly benefit[ed] from and aid[ed] the public corruption of 
Syrian regime officials’, and so in 2008 they include his name on their sanctions 
list. 

Sanctions are one of the major weapons of international law. They are 
intended to force a country’s government or ruling elite to back down and, for 


example, to cease persecuting their own population or pursuing hostilities 
against other countries, engaging in terrorism or genocide. 

Sanctions hit countries where it hurts — in their coffers. The principle is fairly 
simple. The UN, EU or individual countries such as the United States try to 
figure out which people have money and influence. In Syria’s case this is 
primarily Assad and his family. Next comes the inner circle: ministers, 
intelligence officials and financiers such as Rami Makhlouf, who also happens to 
be a relative. These names are put on the sanctions list to tell the world: Look 
here, doing business with these people spells trouble. 

So US citizens have been banned from dealing with Makhlouf since 2008. 
Nothing from which he might profit may take place on American soil. Some 
lawyers even extend their interpretation of the rules so far as to say that it is 
forbidden to do business with him in US dollars. Anyone who breaches these 
rules will run into difficulties the next time they try to enter the USA. Sanction 
breakers also risk winding up on the list themselves, seeing their assets frozen or 
having their US subsidiaries confiscated. 

Put plainly, it is better to have nothing to do with sanctioned individuals. 

This is particularly important for Mossfon because the company also runs 
offices in Las Vegas, in Miami and in Wyoming, i.e. in the United States. Any 
businessperson in their right mind would therefore have severed all business ties 
with Makhlouf in 2008 at the very latest. Not so Jürgen Mossack and Ramon 
Fonseca. Makhlouf’s name still features in Mossack Fonseca’s papers after 2008 
and indeed even after May 2011, when the European Union followed the US’s 
example and imposed sanctions on Assad’s financial backer. 

On the other hand, this is exactly what shell companies are for: they are meant 
to conceal the identity of the ultimate beneficial owner. The oxygen that feeds 
firms such as Mossack Fonseca is secrecy, and that is one thing — if not the only 
thing — for which terrorists, arms dealers and dictators are willing to pay top 
dollar. 

Sanctions quickly reach the limits of their power with shell companies, as 
sanctioned individuals can disappear fairly effortlessly behind their screens. 
Another of Rami Makhlouf’s shell companies will simply do business in his 
stead and no one will be any the wiser, at least not at first. 

It is therefore no wonder that the UN and the US Department of the Treasury 
have entire teams assigned to one single task — finding out behind which firms a 
dictator’s financier or terrorists might be hiding. As soon as that is known, the 
firm can go on the sanctions list. Which is what happened to Makhlouf’s Drex 


Technologies, the firm whose papers are now Staring us in the face. 

However, it takes four years for Drex to join Rami Makhlouf on the list. The 
explanation the US Department of the Treasury gives for this step in July 2012 is 
that Makhlouf is using the company ‘to facilitate and manage his international 
financial holdings’. It is unclear how the US authorities reached this conclusion. 
What we see in the files is this: according to its deed of incorporation, Drex 
Technologies S.A. was established on 4 July 2000 with its official company 
headquarters in the British Virgin Islands. The name Rami Makhlouf appears a 
good dozen times in the company folder. 


[] 


It is not only Rami Makhlouf that we find, but also his brother Hafez, a brigadier 
and regional head of the Syrian civil intelligence service. Hafez Makhlouf, 
whom our data says is the sole owner of a company called Eagle Trading & 
Contracting Ltd, was at one time in charge of a notorious torture facility in 
Damascus. What’s more, experts suspect that he was responsible for poison gas 
attacks on the city of Ghuta, where hundreds of people were killed by sarin gas 
in August 2013. He has been on the US sanctions list since 2007 and on the 
EU’s since 2011, yet the company belonged to him until at least 2013.4 

We also find two other brothers. Iyad Makhlouf, a major in the Syrian Army 
and a secret service agent, whom the EU put on the sanctions list for alleged 
participation in attacks on civilians. And Ihab Makhlouf, sanctioned because he 
is vice chairman of Syriatel and supposedly provides funding to the regime to 
put down demonstrations. He is sporadically involved with several companies, 
but the data suggests that Hoxim Lane Management belonged to him alone.? 

How can anyone do business with these people? That is the question a Swiss 
newspaper puts to Mossack Fonseca in spring 2015 (albeit focusing more on the 
technicalities than the morality of the matter). Its journalists spotted Rami 
Makhlouf’s name in our reports on the law firm in late February 2015. To its 
direct question about Rami Makhlouf the paper receives the following response: 
‘Mossack Fonseca DID NOT KNOW that Mr Makhlouf or any other ally of 
Assad was indirectly using or abusing our services!’ 

Sorry? Mossack Fonseca did not know anything? In capitals? 

Makhlouf didn’t have just one firm with Mossack Fonseca but a whole web of 
offshore companies, and Mossfon says it knew nothing about them? 

Put politely, that is not the complete truth. Put more precisely, it’s a lie. 

Rami Makhlouf demonstrably featured in Mossack Fonseca’s files from at 


least 1998 as the majority shareholder of the offshore company Polter 
Investments, owning 70 per cent of the shares. Thus Mossfon must have known 
since 1998 at the latest that he was one of its clients. An email exchange from 
spring 2011 shows how Jiirgen Mossack’s law firm discusses such problem 
cases in-house. 

Mossfon’s compliance department — the department responsible for checking 
that the firm abides by all guidelines and laws in its daily business — asks the 
partners and managing directors whether they really want to continue to do 
business with Rami Makhlouf. It’s a serious warning when someone is on the 
sanctions list and it would be better to steer clear of them, wouldn’t it? 

The Swiss lawyer Christoph Zollinger, who acts as a sort of junior partner in 
the firm, dismisses their misgivings. He writes to a colleague in an email dated 
17 February 2011 that they can keep the Makhloufs as clients; after all, HSBC in 
London obviously doesn’t have an issue with them.2 

Mossack Fonseca has an internal debate about the problematic case of Rami 
Makhlouf, and it turns out that it also discussed him with HSBC -— and yet 
Mossfon later claims that it didn’t know Assad’s financier was one of its clients? 

The truth is that Mossfon helped, maybe for years, to ensure that the flow of 
cash to Syria didn’t dry up. 

This could have grave consequences for Jiirgen Mossack, as our papers show 
that he was party to the decision about Makhlouf.* If we are correct in our 
assumption that he holds both Panamanian and German citizenship, that is. We 
have in any case found among the papers a copy of his German passport, which 
was Valid until 2006. He has obviously kept renewing his passport since the 
1960s, so why wouldn’t he have done the same in 2006? 

If he hasn’t given up his German citizenship, he might come to regret it. 
German citizens face up to ten years in prison for breaching EU sanctions. In its 
reply to the Swiss newspaper, Mossack Fonseca tried to rebut the allegations 
about its dealings with dictators by stating that it would be pretty idiotic for 
Mossfon to do something of this kind. ‘Who could believe that Mossack Fonseca 
would wilfully, deliberately or even accidentally tarnish a reputation carefully 
built up over thirty-seven years, by aiding criminals, dictators or money 
launderers’ — and all, as Mossfon notes in all caps, ‘FOR A FEW HUNDRED 
DOLLARS IN ANNUAL FEES?’ 

Indeed: who could believe it? Who could believe that Mossack Fonseca could 
be so ‘idiotic’, as they themselves put it, as well as unscrupulous? 

We might also ask: who could imagine Mossack Fonseca could be so brazen? 


For us this case not only means that we can establish a link between Mossack 
Fonseca and Assad; it also shows us the law firm’s modus operandi. This is a 
company that will spread lies and, if necessary, twist the facts without the 
slightest qualm. 

The Makhlouf case also demonstrates why the existence of anonymous shell 
companies poses an existential threat to millions of people. Because they can 
help dictators to circumvent sanctions imposed by the international community. 
Because they can help brutal leaders to plunder the countries they rule. And 
because they allow them to hide these stolen assets in shell companies, although 
the related account is often located in Switzerland or Luxembourg — in Rami 
Makhlouf’s case at HSBC’s Swiss office. 


[] 


Mossfon answered the Süddeutsche Zeitung’s enquiry in February 2015 by 
saying that it would not accept people on sanctions lists as clients. We therefore 
get hold of the UN, EU and US sanctions lists — a Who’s Who of ruthless and 
genocidal dictators, terrorists and the companies they own or use. There are 
hundreds of names, each with many different spellings. We look for them in our 
data and are genuinely amazed. 

So Mossfon doesn’t deal with anyone on a sanctions list, huh? Pull the other 
one. 

We find accomplices of African dictators, Central American drug barons, 
convicted sex offenders, each with an offshore company. There are so many of 
them that we soon lose track. We draw up lists and compare the details in our 
files with information from the EU, the UN and the USA. Below is a selection. 


Bredenkamp, John Arnold 

This South African-born arms dealer was subject to EU sanctions from 2009 
to 2012 due to his ‘close links to the Zimbabwean government’. The US 
Department of the Treasury views him as an associate of Mugabe’s regime 
and imposed sanctions on Bredenkamp and twenty of his firms in 2008.2 


Makhlouf, Ihab 
Syrian president Bashar al-Assad’s cousin was sanctioned by the EU in May 
2011 because he ‘funds the regime and helps to suppress demonstrations’. 


Makhlouf, Iyab 


Bashar al-Assad’s cousin and a Syrian intelligence officer was put on the EU 
sanctions list because he was allegedly involved in putting down protests. 


Makhlouf, Hafez 
This brigadier and former regional head of the Syrian civil intelligence 
service was sanctioned by the EU, along with his brother, in May 2011. 


Makhlouf, Rami 
Said to be Syria’s wealthiest man, he was sanctioned by the USA in 
February 2008, followed by the EU in May 2011. 


N’Da Ametchi, Jean-Claude 
The EU placed the banker on its sanctions list in 2011 because he allegedly 
provided ‘funding to the illegitimate government’ of the then president of 
Ivory Coast, Laurent Gbagbo.® 


Rautenbach, Muller Conrad 

The businessman and his firm Ridgepoint Overseas Development, managed 
by Mossack Fonseca, was subject to US sanctions from 2008 to 2014 due to 
his close ties to Zimbabwe’s autocratic ruler, Mugabe. In 2012 the EU lifted 
the sanctions it had imposed on him in 2009.2 


Stjepanovic, Savo 
This Slovenian was sanctioned by the US in February 2015 because he 
allegedly belonged to an international steroid smuggling ring.® 


Ternavsky, Anatoly 

This Belarusian citizen was included in the EU sanctions regime from 2012 
to 2014 because he was supposedly close to Belarusian autocrat Alexander 
Lukashenko.? 


Timchenko, Gennady 
The Russian-Finnish oligarch was placed on the US sanctions list in March 
2014 in the wake of the Crimea crisis.“2 


Mossfon supplied such people with shell companies on a routine basis for many 
years. 


Even if firms or their shareholders were in the crosshairs of the authorities and 
placed on their sanctions lists, Mossfon clearly did not always see this as a 
compelling reason to immediately break off business dealings, as the following 
cases illustrate. 


Brodway Commerce Inc. 
The firm was sanctioned by the US authorities in 2012. One of the 
company’s directors was a Guatemalan woman, Marllory Dadiana Chacón 
Rossell, also known as ‘Queen of the South’. According to the US 
Department of the Treasury she had once established one of the largest drug 
rings in Central America. 


Drex Technologies S.A. 

The United States and the European Union placed this firm, founded in 2000 
in the British Virgin Islands, on their sanctions lists in 2012 because it 
belonged to Rami Makhlouf.“ 


Kuo Oil Pte. Ltd 

This Singapore-based company was sanctioned by the US from 2012 to 
January 2016 because it was said to have delivered over $25 million’s worth 
of oil to Iran between 2010 and 2011, thereby breaching the trade embargo.’ 


Ovlas Trading S.A. 

The US imposed sanctions on the company in December 2010 because of 
the alleged involvement of Kassim Tajideen, who it claimed was a major 
financial backer of Hezbollah. 


Petropars Ltd 
The company was subject to US sanctions from June 2010 to early 2016 as 
part of the Iran embargo.” 


Timpani Exports Ltd 

This company, based in the British Virgin Islands, was sanctioned by the 
United States in November 2008 because it belonged to the aforementioned 
John Arnold Bredenkamp, who was a member of the Zimbabwean autocrat 
Robert Mugabe’s inner circle.1® 


We also share our findings with the ICIJ. By now we are telephoning, chatting or 
emailing with Gerard Ryle almost every day. He asks questions and we answer. 
About how the data is structured, the tax havens that appear most frequently, the 
nationalities of the people whose passport photocopies we see in the papers: 
Gerard wants to know every detail. The only thing is that he still hasn’t 
confirmed whether he and the ICIJ want to join the project. Meanwhile, we use 
every free minute to dig through the data, always emerging with new stories. 


[] 


Serious as most of them are (arms dealers and dictators are responsible for 
countless deaths, for instance), some cases are simply absurd. We have looked 
over and over again for the former Ukrainian prime minister Yulia Tymoshenko 
and her predecessor Pavel Lazarenko. The two of them are alleged to have 
creamed off millions of state dollars in the 1990s. Lazarenko was later sentenced 
to several years’ imprisonment for money laundering, first by a Swiss judge and 
then by a US court. At the time the US investigators named as an ‘unindicted co- 
conspirator’ none other than Yulia Tymoshenko.” 

So once more we enter ‘Lazarenko’ into our search engine and find, among 
other things, a fax bearing the personal signature of Pavel Lazarenko. Not from 
some point in the 1990s, but on 21 April 2005. 

The absurd thing about this fax is that Lazarenko claims he had found out only 
a few weeks earlier that a certain Gateway Marketing Inc. — a shell company run 
by Mossack Fonseca — belonged to him. Now Lazarenko is asking for all the 
relevant documentation. 

A shell company? Whoops! 

Lazarenko sends the fax from California where he is living in a grotesquely 
outsized villa. There are countless pictures of the property with six pools on 
various levels.12 

This adds another leading politician to our files. After the trails leading to 
Assad, Putin and the Kirchners, to the Icelandic prime minister and the former 
Nicaraguan president Arnoldo ‘Fat Man’ Aleman, it is Ukraine’s turn. 

It is now worth filing these cases in a specially named folder: ‘Heads of state’. 


[SZ]: There’s a story about Mossack Fonseca and the Leak in a Swiss newspaper. The author has also 
questioned Mossfon. 

[john doe]: Really? And what does Mossack Fonseca say? 

[SZ]: They say: “Our organization has had no data leaked to date.” 

[john doe]: Ha! No leak! If there’s no leak, I wonder why I need all this storage space for the data. . . 


Of course we would love to know as much as possible about where our source 
got the data, but it’s not critical. What is critical is that the data is authentic and 
socially relevant. There is absolutely no doubt that it is relevant and, after much 
crosschecking, its authenticity is fundamentally beyond dispute. 

And yet the nightmare scenario of every investigative journalist is that he or 
she has been taken in by false data. The realization that no human could have 
faked such a huge quantity of data is only of limited reassurance, as it would 
suffice for one crucial document to have been doctored and planted there for the 
whole project to come under fire — even if 99 per cent of the data was genuine. 

We have already compared our documents with court papers, public registers 
and other sources and have come across no anomalies whatsoever. Moreover, we 
have a secondary guarantee. We found out that German tax investigators had 
purchased Mossfon data a little while ago. By a roundabout route we were able 
to correlate that data with our own. Our data is a great deal more up to date and 
there is far, far more of it, but there are no inconsistencies between our data on 
offshore companies and the investigators’. 

We keep turning over the same questions with ICIJ boss Gerard Ryle: 

Who might have an interest in setting us up? 

Who might wish to set us a trap, and how? 

How can we test the trustworthiness of our source? 

These and other questions always lead to the conclusion that the crucial thing 
is not the source but the material. That we trust, and this trust has been backed 
up by hundreds of crosschecks. 

On this we agree with the ICIJ boss, who has by now officially announced that 
our data deserves its own ICIJ project. 

We get down to planning. 


[] 


We have a problem, however: there is too much data. Neither of us is an expert 
in dealing with large volumes of data, even though we have worked on a number 
of similar projects before. The big difference, though, is that this particular data 
is not landing any old place, but on our computers. We can just about cope with 
storing and safeguarding the information. We buy external hard drives with half 
a terabyte of memory. We shunt files around, back them up and encrypt the 
drives. 

The thing is we can’t search it properly any more. Even in recent weeks it was 


only partially possible to do a search, because we were unable to run text 
recognition on the PDFs and photographed contracts. Our computer’s search 
engine couldn’t recognize the content of the text; it merely registered the file 
name and the fact that it was a picture file. 

Now, with roughly 200 gigabytes of data, our computers have given up. IT 
experts explain to us that the computers have too little of just about everything 
you need to search large quantities of data — disk space, main memory, 
processing power. 

We need a new computer, and quick. Our head of department and editor-in- 
chief agree to buy us a new, more powerful laptop. We are even authorized to 
bypass the strict central purchasing rule and order it separately, as our in-house 
expert says it will take four to six weeks until our special laptop is actually set up 
and in our office. If all goes well. We order one online instead and a week later 
the thing arrives. 

Along with a few technical specifications the laptop has one major 
particularity: it has never been connected to the Internet before. Its wireless local 
area network (WLAN) is deactivated, and no LAN cable will ever penetrate its 
casing. This is known as an ‘air gap’. 

One of the many lessons of the Snowden leaks is that a computer is only 
relatively secure from hackers if it has never been connected to the Internet, i.e. 
if an air gap separates it from other systems. Intelligence services are now able 
to control even switched-off mobile phones, so it’s a piece of cake for them to 
hack into a computer that has been connected to a WLAN. To bridge an air gap, 
however, a secret service agent would have to have physical access to the 
relevant computer, which would mean getting past the security guards at the 
entrance to the Stiddeutsche Zeitung’s offices. 

We sit down together every few days and consider how to proceed. We are 
only marginally inconvenienced by current reporting jobs: one of us is 
investigating a scandal about salmonella-infected eggs on the side; every few 
weeks, the other takes on another subject such as the ‘no-spy’ affair or the hack 
attacks on the German parliament.” Otherwise, our colleagues Hans Leyendecker 
and Klaus Ott cover our backs with an almost frightening output of articles. 
Nobody would really know that the Brothers Obermay/ier have been working for 
weeks on a new secret project. 


* The ‘no-spy’ affair was a dispute about American spying on German soil. 


By this time we have decided to concentrate initially on the international 
dimension. We want to work out the international relevance of the growing 
mountain of data before we start scattering it around the world. 

Following the ICIJ’s go-ahead, the leak machinery is just getting into gear. 
Gerard Ryle has brought the consortium’s data specialists, reporters and 
organizers into the loop. Marina Walker, Ryle’s deputy, is to lead the new 
project. An Argentinian, she has fifteen years’ experience as an investigative 
journalist under her belt and has won just about every professional award going, 
including honours from Investigative Reporters and Editors Inc., the Overseas 
Press Club of America and the Society of Professional Journalists. Most 
importantly, though, Marina Walker is a fantastic organizer, so she’s perfect for 
this project. 

There is a never-ending list of questions to be answered. Which other media 
should we invite on board? How do we transfer the first documents? Which 
programs can we trust? Our investigations will unsettle a lot of people who have 
done business with Mossack Fonseca, and that makes us potential surveillance 
targets. 

It all feels normal while we’re discussing this kind of issue in practical terms; 
encryption is nothing new. However, we feel queasy every time we think of all 
the names in our data. We have already found many traces of people who have 
obviously had other people killed. Do we want to report these facts? Do we want 
to find ourselves in the sights of the Italian mafia? Or the Russian mafia? 

Both these organizations have links to Mossack Fonseca shell companies. We 
come across the name of a Russian who was arrested for arms deals with the 
Russian mafia. One Italian man in the data is suspected of being the accountant 
of a branch of the mafia. Yet we still do not know the purpose of these 
companies. When the ICIJ joint venture is up and running, though, we can count 
on the help of others and will be able to pass on such stories to our colleagues in 
Italy and Russia. Those colleagues will be better able to evaluate the potential 
danger involved. Leo Sisti of the weekly L’Espresso, for example, has been 
uncovering criminal machinations for over thirty years. He was the first to write 
about Silvio Berlusconi’s offshore dealings and has published books about the 
funding of Al-Qaeda and the Sicilian mafia. And he’s still alive. 


[] 


We are completely addicted to the Assad connection. We search for more people 
from the entourage of the man waging a war that has so far claimed over a 


quarter of a million lives — and we find them. A man called Suleiman Marouf 
appears as a shareholder in quite a number of our shell companies. Like Rami 
Makhlouf, he is reputed to be a good friend of Assad. The media have named 
him the Syrian dictator’s ‘London fixer’, a middleman for his business there. 

A further minor detail: as emails published by WikiLeaks revealed, Marouf 
also purchased expensive Ming vases and Armani designer interior furnishings 
at Harrods for Assad’s wife Asma, long after she was a persona non grata in 
Europe. One hundred thousand people had already died in the Syrian civil war 
and Asma al-Assad was stocking up on items in the Harrods sales.”2 

Ten months after Marouf was added to the EU sanctions list, Mossack 
Fonseca’s compliance department called Mossfon’s London office. After all, the 
Syrian still owned at least eleven companies, seven of which were apparently 
used to buy or run properties in Britain. The compliance department concluded 
that ‘according to our risk assessment, these companies [are] high risk’. Mossfon 
employees run Marouf’s name through World Check, one of several databases 
containing the names of every person with suspicious ties to politicians or 
criminals. The Mossfon people also google Marouf and find the same 
information as we did: he is ‘Assad’s man in London’ and is on the sanctions 
list. 

Despite this, Suleiman Marouf was retained as a client and is still one in 2015. 
Occasionally Mossack Fonseca’s inaction works out nicely, for Marouf was 
taken off the sanctions list in 2014. Under pressure from Marouf’s lawyers, the 
British Foreign Office had him removed from the sanctions list — ‘for lack of 
evidence that would stand up in court’. 

We also happen upon a company called Maxima Middle East Trading Co., 
which in January 2013 decides to open an account at the Syria International 
Islamic Bank. Long after Syria had descended into civil war, reports suggested 
that the bank supplied Assad’s regime with money and helped it evade sanctions. 
In 2012 the financial institution was therefore placed on the US sanctions list — 
and yet Mossfon helped its client to open an account there. 

Of course, our number one question is: why did this company want to open an 
account with this bank? 

We study the company more closely, scour the documents one by one, search 
databases and question experts. We discover that Maxima Middle East Trading 
Co. runs an office in the free trade zone of Sharjah, one of the United Arab 
Emirates and an infamous hub of secret supplies to Syria. The US authorities do 
indeed regard the firm as the nexus of a complex network of companies that use 


fake papers to deliver oil to Syria. In December 2014 the US imposed sanctions 
on Maxima Middle East Trading Co. and its then managing director Ahmad 
Barqawi.24 

The US Treasury Department suspects the company of having ‘worked with a 
Russian oil and gas firm to obtain various types of base oil for transfer to 
[Syrian] government-controlled refineries [. . .] in Homs and Damascus’. It had 
thus helped other companies ‘in their deceptive practices and facilitation of the 
movement of aviation fuel to Syria’ — the fuel that the Syrian regime needs to 
bomb its own people. 

A company by the name of Pangates International Corporation Ltd is also said 
to have joined in with Maxima Middle East Trading Co.’s operation. Pangates is 
also mentioned in our data — three times. Once as a company in the tax haven of 
Niue (a South Pacific island), once in Samoa and once in the Seychelles. In July 
2014 the United States finally sanctioned the company for providing ‘material 
support for, and goods and services to, the Government of Syria’. And thus to 
Assad. 

And yet in Mossack Fonseca’s systems the company appears to have remained 
active for another year after it was sanctioned. Another year during which 
Mossfon apparently broke a US embargo.” 
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FROM THE WAFFEN-SS TO THE CIA AND 
PANAMA 


259 gigabytes. 260. 261. 

This makes our mountain of data the largest leak in the history of journalism. 
Larger than Offshore Secrets. 

By way of comparison, the diplomatic cables published by WikiLeaks 
amounted to 1.7 gigabytes; the HSBC Files, based on Hervé Falciani’s 
documents, 3.3 gigabytes; the Luxembourg Tax Files 4 gigabytes; the 
WikiLeaks Afghanistan protocols 1.4 gigabytes. 

Of course, it isn’t the size of a leak that matters. 260 gigabytes of meaningless 
files are, in the final analysis, no more than meaningless files. Also, it is very 
hard to imagine 260 gigabytes. Well, let us tell you: 260 gigabytes represent 
almost a million emails and several million pages of secret documents. We 
should be able to do something with that much information. But ‘the biggest 
ever leak’ should be a headline that captures people’s attention if we go public 
with the results of our investigation one day. 

‘Do you really want to do it? Do you really want to publish something one 
day?’ our boss Hans Leyendecker might quip at this juncture, having teased us 
for so long that we have in effect given up newspaper reporting and simply laze 
around on top of our hard drive. Yet he is the man who has made all of this 
possible and defended our ‘laziness’ to his superiors. 

The size of the leak is also helpful in another way, because it allows us to 
interest ICIJ colleagues from all over the world. The bigger the leak, the greater 
the likelihood that individual journalists will find good stories involving their 
own countries; and the more colleagues join the investigation, the more stories 
we'll be able to bring to light. 

The whole world. Our leak. Assad, Putin, Iceland, $500 million. It’s utterly 
absurd, and the most amazing thing is that the source just keeps on going. He or 
she just won’t stop. 

The next day we phone Gerard Ryle. We tell him about the state of play and 


how the arguments for our ICIJ colleagues are getting ever better. He’s happy, 
but he soon steers the conversation towards practical aspects. The ICIJ is going 
to send two data specialists to Munich: the Spanish journalist Mar Cabra, head of 
the ICIJ data team, and Rigoberto Carvajal, the head programmer from Costa 
Rica. The two of them will review our data critically and try to make sense of it. 
They will tell us how to tackle this data mountain and will bring with them a 
program that enables us to search it better. They will also take a hard drive back 
to Washington. Encrypted, obviously. Or to be more precise: encrypted and 
concealed. 

This is how it works. Encryption programs such as TrueCrypt or VeraCrypt 
(both of which Edward Snowden says even NSA experts couldn’t crack, at least 
until recently) are used to prepare an external hard drive so that it appears at first 
sight only to be encrypted. However, on this hard drive, alongside the visible 
encrypted drive, there is a second encrypted and invisible one. Should the FBI, 
customs or anyone else compel Rigoberto or Mar to plug in the hard drive and 
decrypt the drive, they will enter the password for the visible drive. This will 
then start up, and on it we will have saved a few folders containing some files 
that look secret and important, but actually aren’t. 

The presence of a second drive is neither visible nor verifiable. 

It is not incredibly difficult to encrypt a hard drive in this way, but nor is it the 
easiest exercise in the world for people like us who have trouble memorizing a 
six-letter password. Our new passwords look something like this: 

Nvc87sad5chj56586356%&fc8796c_ndnuc7 1dehdtg3%$654tz3 

That isn’t a joke. All of a sudden, entirely without warning, we have become 
nerds. But that’s okay: it feels pretty good to do our bit for security. In any 
event, it’s up to us to encrypt the hard drives until Rigoberto and Mar, whom 
we’ve known since Offshore Secrets, get to Munich. 


[] 


As the two data experts are setting off, we do some old-school investigating, 
visiting archive offices and leafing through yellowing documents. When we 
started to track how Jürgen Mossack ended up in Panama, we submitted a large 
number of requests to archive offices. We wanted to know if his father had been 
a Nazi and if he had had a particular reason for decamping to Latin America. 

The first results of our requests have arrived. It turns out that Erhard Mossack 
was in the Waffen-SS. In the federal archives we find his service card, on which 
it says that Mossack was promoted to Rottenführer, or corporal, in September 


1944. 

We find out more from an FBI dossier. Erhard Mossack, born 16 April 1924 in 
Grube-Erika in the district of Hoyerswerda, joined the Hitler Youth at the age of 
fifteen and the Waffen-SS at eighteen. Fittingly, under ‘distinctive features’ it 
records a scar on the inside of his left upper arm ‘where the blood-group tattoo 
was removed’. The blood-group tattoo was a virtually unmistakable sign of 
Waffen-SS membership, and therefore many SS soldiers tried to get rid of the 
tattoo in the final days of the war and beyond. According to the dossier, Erhard 
Mossack did in fact move in November 1942 to the SS Totenkopf (Skull and 
Crossbones) Division, with which he fought in what was then Czechoslovakia, 
Finland and Norway. In January 1945, a few days after his promotion to 
corporal, he was sent to the Western Front and in March he was taken prisoner 
by US units. In December that year he managed to escape from a prisoner of war 
camp in Le Havre in France and battle his way back to Germany. 

Then, in 1946, he was arrested in Offenbach. An informant for the US Counter 
Intelligence Corps (CIC) claimed that Mossack ‘possessed a long list of names’ 
connected with an underground organization of which Mossack himself was a 
member. The CIC assessed Mossack thus: ‘Indoctrinated through and through 
with Nazi ideology. As a typical Hitler Youth leader, he still lives in his world of 
Nazi slogans and is a remarkable example of a German youth under Hitler.’ 

The big question is, why was the Waffen-SS man later allowed to enter the 
United States? That had, after all, been his stated aim when he signed off the 
register in Germany. 

The answer is that Erhard Mossack obviously changed sides after the war. We 
discover this through a simple Google search. We type in ‘Erhard Mossack’ and 
at some stage we end up on a website that publishes US documents related to the 
Second World War, including a list of names of suspected Nazis who assisted 
the American intelligence services after the war. One of those names is Erhard 
Mossack. 

That would explain the immigration permit — if, that is, he ever entered the 
United States and didn’t travel directly to Panama. Whichever way, it is likely 
that the sheltering hand of the CIA facilitated his passage. Panama was regarded 
as a Safe and pleasant haven for National Socialists, who were for a variety of 
reasons no longer welcome in the USA. The American author Eric Lichtblau 
cites a host of examples in his book The Nazis Next Door. 

The case of Klaus Barbie, the ‘Butcher of Lyon’, who lived in Latin America 
under the pseudonym ‘Klaus Altmann’, is one example of the despicable way in 


which the US intelligence services went about recruiting Nazi informants. 
Barbie too was an occasional visitor to Panama. 

There is a fairly unflattering CIA cable about Erhard Mossack’s work as an 
informant. It would appear to be about Cuban agents, but the CIA doesn’t seem 
too sure that Mossack is reliable or that his past won’t catch up with him. 

However, we have now established that Mossack did cooperate with the 
intelligence services. We know that because we have received a reply from the 
BND, Germany’s foreign intelligence agency. We wanted to know if there is any 
material in the BND’s archives pertaining to Erhard Mossack. There is, but the 
BND doesn’t want to provide it, because a disclosure might, among other things, 
“endanger the welfare of the Federal Republic of Germany or one of its regions’. 

So far, so mysterious. 

Unfortunately this is where Mossack’s trail peters out. The one thing that is 
certain is that a ‘Peter Erhard Mossack’ becomes a director and chairman of a 
company called Union Alemana de Exportación S.A. (German Export Union), 
established in March 1965. One of the other directors is Luisa Herzog de 
Mossack, his wife. The documents show that the company rented office space 
until 1970, more or less. 

Jiirgen Mossack, their son and offshore king, tries to sell this company in 1989 
for the sum of $20,000 to a London-based lawyer who is strangely desperate to 
acquire a company founded around 1960. The Union Alemana de Exportación 
S.A. was therefore five years too young and the sale did not go ahead. 

Why, in 1989, would a London-based lawyer need an offshore company 
established in 1960? It can provide an impression of legitimacy — for example, 
that a company has been active for a long time. If you want to take part in a 
public tender, for instance, you often have a better chance if you’ve been in 
business for a while and not just for a few months. The specialist term for this is 
a ‘vintage company’. Vintage, because the firms are supposed to look worn, like 
jeans. Still, we have no idea what Mossack’s prospective buyer meant to do. 

Due to the BND’s stonewalling, the precise intentions and activities of the ex- 
Waffen-SS man who became a CIA informant with a BND file remain opaque. 
What does seem clear, though, is that Mossacks father and son followed a 
similar principle: never be too picky when choosing your business partners. 


[] 


At the beginning of May 2015 the two ICIJ data experts, Rigoberto Carvajal and 
Mar Cabra, land in Munich. They listen with fascination as we tell Erhard 


Mossack’s story. Nazis are always news, the CIA is always news, but the two 
combined is fantastic. 

Rigo Carvajal and Mar Cabra have rented a flat in Munich, and when we enter, 
it feels as if we’ve stepped into a pastiche of a hacker film. All the blinds are 
down, there are laptops on two tables and on all sides cables snake, external hard 
drives wink, screens flicker and computers hum. Scattered around them are USB 
sticks, coffee cups and rucksacks. 

Mar and Rigo have broad grins on their faces. ‘Welcome to the world of data,’ 
says Mar. We place our laptops beside theirs and dive into this strange universe. 

We hand over all the material we have so far, then tell them everything we 
know about it, starting with the fact that Mossack Fonseca has arranged its data 
very neatly. Every company Mossack Fonseca sets up is given a reference 
number. Next, a digital folder bearing this number is created in the system. Into 
this folder Mossfon’s employees then clearly slide any information related to the 
company: certificates of incorporation, copies of the shares issued, a register of 
the directors and shareholders, contracts, scanned copies of official passports 
and, above all, emails regarding the company. 

Mar, ICIJ’s Spanish data chief, has enough energy for at least three normal 
people. She bounces around the room like a rubber ball, waving her arms about 
and talking virtually without pausing for breath — even when we are supposed to 
be explaining what we’ve got. She lets out a hoarse laugh, apologizes and says, 
‘Then why don’t you say something? We’re here for you!’ At the same time, 
Mar is very structured. She writes a new to-do list every few minutes, drafts new 
time schedules and outlines best-case and worst-case scenarios. She’s got 
everything, and everyone working on this project, under control. 

Rigo, the programmer, generally sits there quietly and listens, but his eyes 
twinkle. Only occasionally does he ask a question, and we can see that his mind 
is working overtime. It’s his job to analyse the data in a way that allows 
journalists to make the best possible use of it. At the end of every ICIJ 
investigation, no one knows the data as thoroughly as Rigo. He has to 
understand every ramification in order to be able to program perfectly the 
various tools everyone uses: a multi-level security database for secret 
documents, which can be accessed by every journalist participating in the project 
worldwide; a secure forum for everyone to communicate with each other; and a 
database exclusively for structural data that can be used to create visualizations. 
Every company and its related entities should appear in this, which means 
primarily the shareholders and the brokers. Rigo’s idea is that every participating 


journalist should be able to find out in a couple of clicks if an individual has a 
stake in other companies and if so, which ones; and then which other individuals 
have a stake in those companies, and so on. An ever-expanding visualization, so 
to speak. Rigo is an enthusiastic advocate of representing complex networks of 
companies with graphics. 

That’s easier said than done, though, as in many cases the owner column 
merely reads “The Bearer’ or, in Spanish, ‘El Portador’. This is something we 
learned right at the beginning of the investigation: if offshore companies only 
issue a single bearer share, then the company’s owner is the person who 
physically possesses that paper. The advantage of this is that it is very easy, 
without leaving any trail, to buy and sell companies, along with all the 
company’s assets, whether that be a villa in Mallorca or a shipload of automatic 
rifles for a country in the midst of a civil war. It is simply impossible to 
determine to whom the company belongs: the information is often not even in 
Mossack Fonseca’s internal folders, or only in one file among a thousand in a 
folder. 

If we really do want to publish something some day — and that’s what we’ve 
promised our boss — we’re going to have to search faster and more effectively. 


[] 


We need a program like Nuix Investigator. Nuix is an Australian company that 
produces forensic IT software, which means that you can use it to sort and sift 
through jumbled data. It can even log unsearchable PDFs, pictures and scanned 
documents. We have thousands of those kinds of files, so Nuix is precisely what 
we need. But it costs a fortune. It’s the type of software normally used by 
intelligence services, law firms, police forces and anti-corruption investigators 
around the world. ‘No software other than Nuix can process large collections 
fast enough to meet the SEC’s desired timeframes’, is how Nuix advertises its 
products on its homepage. The US Securities and Exchange Commission (SEC) 
is the body that regulates the stock exchange and as such must deal with vast 
quantities of data. If Nuix can deal with that, it’ll certainly be able to deal with 
our data. 

Although Nuix is exorbitantly expensive, we and others in the ICIJ used it for 
Offshore Secrets. ICIJ boss Gerard Ryle is Australian and he managed to 
persuade the company to support the consortium’s work by providing several 
free licences. 

Nuix does the same for this project. Mar and Rigo bring us a licence on a stick. 


So, a little awestruck, we sit there in front of our new laptop with 500 gigabytes 
of memory and let Mar and Rigo explain how Nuix works. On the surface it’s 
very simple: a search field that is used like the Google search bar, a preview 
window and a list of results. But the results also show the file path, the 
environment and the tree data structure. What’s more, you can export and save 
all the search results if you don’t have time to analyse the search right away. 

Anyone who has only ever worked with free search tools and then switches to 
Nuix will feel as if they’ve traded up from a soapbox on wheels to a Formula 1 
racing car. 

Nuix’s basic principle is simple: the files you want to search are uploaded into 
the program as ‘evidence’ and automatically tagged — or as the pros say, 
indexed. This is relatively easy with Word documents and emails, but harder 
with PDFs and photo files — and there are already hundreds of thousands of those 
in our data by this point. The Nuix program must therefore first be able to 
identify if there is any text in the pictures. This is done by text recognition 
software called optical character recognition or OCR. Only when every 
document has undergone OCR is a negative search result truly a negative search 
result. Only then can you be relatively certain that Angela Merkel is not hiding 
in the data after the search for ‘Angela Merkel’ has produced zero hits. 

That’s as long as the name is not in a fax that has been printed out and later 
scanned or has been written using an old typewriter; if that’s the case, OCR will 
not produce any hits. You can therefore only ever entirely exclude the possibility 
that someone has done business with Mossack Fonseca by examining every 
single page yourself. 

Once Nuix has compiled an index of our data and OCR has run through it, we 
are for the first time in a position to conduct a comprehensive search of our data 
— all 350 gigabytes of it at this point. Mar and Rigo fly back to Spain and Costa 
Rica respectively, and we sit down at our computers again. Only, what are we 
looking for? Helmut Kohl? Gerhard Schröder? Uli Hoeness? 


[] 


While working on the Offshore Secrets documents in late 2012, four of us sat in 
a windowless office for several weeks and threw random search terms at the 
system. The result was that each of us typed in names such as Franz Josef 
Strauß, Klaus Zumwinkel, Josef Ackermann and of course Helmut Kohl — not 
just once but twice or even three times. Who could remember whose name he’d 
entered ten days ago? Then we realized how ridiculous this was and started to 


make lists of the main German politicians, major business leaders and so on. 

This time around, we approach our task strategically from the outset. 
Naturally, we use every free moment to search for names that interest us, but we 
also draw up detailed lists. We realize after Mar’s and Rigo’s departures that 
without these lists we’ll soon lose track and that will mean wasting time — time 
we’re bound to need later, given the size of the data mountain. 

Basically, we make an inventory of public life in the Federal Republic of 
Germany. We list all the leading politicians, business executives, sportspeople 
and public figures. We look for the super-rich, criminals and swindlers, and we 
try to compile the names of as many individuals implicated in scandals as 
possible, meaning anyone involved in a major affair such as the Christian 
Democratic Union of Germany’s donations scandal. Our data stretches back into 
the 1970s. 

We want to use these lists later to fish in the data, because you can do that with 
Nuix. You feed in an Excel document filled with names and you get back an 
Excel document with the hits. The results are ranked by match percentage. 
‘Gerhard Schröder’, for example, would be a 100 per cent hit, ‘Gerhard 
Schrader’ probably about 95 per cent, ‘Gerd Schroder’ 80 per cent and ‘Gerhard 
Schroem’ 60 per cent or below, so you often have to go through the lists of 
results manually, hit by hit. 

Our final list for ‘party donations scandals’ includes 130 names, whereas the 
list of former Stasi officials and their suspected helpers totals 94,856 names. 

Meanwhile, we keep on searching for terms that seem as if they might bring to 
light interesting internal emails. For instance, Mossack Fonseca has regular 
dealings with criminals and authorities track criminals. Maybe we should type in 
‘search warrant’? 

Lo and behold, we get a long list of hits with ‘search warrant’. One of these is 
related to a series of companies in the British Virgin Islands, which an 
organization called the Libyan Asset Tracing Committee suspects of being sham 
companies with whose assistance Gaddafi and his accomplices supposedly 
smuggled $150 million out of the country. Mossfon rejects this allegation, but it 
is obviously serious enough for the Financial Investigation Agency — a British 
Virgin Islands body not known for its zeal in such matters — to intervene. On 30 
October 2013 the FIA issues a warrant to search the local Mossack Fonseca 
office. 

What we barely ever see is any sign of consternation. One might expect, in 
internal emails at least, to read sentences like ‘Damn, have we really been 


helping Gaddafi’s henchmen to ransack their country for years?’ 
[] 


A new lead. We create a new subfolder in the ‘Heads of state’ folder and call it 
‘Gaddafi’. The company names inside it sound quaint, romantic even: Wildwood 
Trades Ltd, Moon Silk Ltd, Sirvent Star Corporation, Bristows Corp., Regency 
Belle Corporation, Seafire Systems Ltd, Sea Swells, Morning Star Technology 
Ltd, Pacific Mist Ltd, HC Nominees (BVL) Ltd and Albion International Group. 

Studying these companies, we find several letters from the authorities. What 
emerges from them is that the investigators presume that the companies belong 
to a certain Ali Dabaiba. Under Gaddafi the qualified geography teacher was 
head of the Organization for Development of Administrative Centres, a gigantic 
public procurement agency.+ 

The exciting thing about this lead is that it’s extremely fresh. We need more 
information. 


[john doe]: Had some trouble sleeping tonight. I was thinking about how people will react to these 
revelations. It’s very likely that some of the firm’s clients will try to find me. And some of those 
clients have intelligence agencies. 

[SZ]: Quite possible. Be careful. 

[john doe]: I’m trying. Are you also taking precautions? The journalists involved here are not going to 
be particularly popular among the clients either. 

[SZ]: We do what we can. 


It’s true that we’re taking greater care with every passing week — as it becomes 
clearer that this data could send shockwaves around the world. At first, we only 
initiate those who absolutely need to know about our project: our head of 
department and the main editorial office. Our cooperation with the ICIJ is now 
official. Mar and Rigo have completed a preliminary analysis of the data we 
gave them in Munich. They’ve carried out some initial trials to determine how 
best to process it and make the scans searchable, and they have also set up an 
encrypted forum. We set up virtual meetings with Mar Cabra, Rigo Carvajal, 
Gerard Ryle and Marina Walker every few days. We run through the data, our 
plans, the work to be done and which colleagues from which countries we 
should target and approach. Argentina is clear: La Nación. In Britain the 
Guardian and the BBC. In France Le Monde and Edouard Perrin, who revealed 
the Luxembourg Tax Files. 

We need journalists in Russia too, but that isn’t so simple. There aren’t very 
many Russian colleagues who can write freely. And those who do risk a great 


deal: beatings, imprisonment, their lives. 

The same is true for China. Mossack Fonseca now has ten offices in China, 
which is a sign that it has a lot of rich Chinese clients, yet including a colleague 
from China or Hong Kong is unthinkable. 

Why? 

In early 2014 we did a follow-up report to Offshore Secrets, an investigation, 
based on the same data, into Chinese owners of shell companies. We had left out 
this part the first time because Chinese names are so hard to verify. Then we 
found out from the Offshore Secrets data that China’s ruling elite was 
conducting secret business in tax havens on a huge scale. We came across shell 
companies belonging to close relatives of leading politicians. Some of the 
country’s wealthiest men and women were in there, as were executives of state- 
owned companies caught up in corruption scandals. 

We worked with Ming Pao, a newspaper in Hong Kong at the time. We 
thought we realized how big a risk Ming Pao was running, but no one realized 
quite how big. On the one hand, the paper was in Hong Kong; on the other, 
criticizing China’s elite is always a gamble, even in relatively liberal Hong 
Kong. In any case, Ming Pao’s editor-in-chief Kevin Lau was fired shortly 
before the planned publication and replaced with a successor who was kindly 
disposed to the regime. There were massive protests among the staff, but to no 
avail. Within hours of publishing our stories, most reports had been censored in 
China and the homepages of the Siiddeutsche Zeitung — where we published the 
most important findings in Chinese — and of other ICIJ partners were blocked. 

Far worse was to come. Shortly afterwards, Kevin Lau was attacked with a 
knife in the street one morning on his way to the car park. He was stabbed six 
times in the back and seriously injured, but survived the assassination attempt. 
His attackers fled the scene on a motorbike, but several Triad members were 
later arrested. They were the compliant henchmen — young men who were ready 
to kill journalists for a fistful of Hong Kong dollars. But the identity of those 
who masterminded the crime has still not been uncovered to this day. Some 
argue that the attackers were not supposed to kill Lau, but merely intimidate 
him. 

The ICIJ has now brought Alexa Olesen onto our project. She was China 
correspondent for the Associated Press news agency and worked as a freelance 
journalist on Offshore Secrets. She’s responsible for China-related subjects this 
time too and within days she has scored her first success: she finds the 
granddaughter of a high-ranking party member among the data, along with two 


Chinese billionaires and a film star. 

Our German discoveries almost pale into insignificance compared with the 
international scope of our data. 

By this point, the source has supplied us with a list of about 215,000 Mossfon 
companies. We forward this new list to the ICIJ. Mar Cabra, the head of the data 
team, loves lists. Using lists, you can impose order on the data chaos. Mar can 
see in which tax havens the companies named in the data are based, and in which 
countries their shareholders are resident. She can then prepare separate lists for 
individual countries — which will, at a later stage in the project, make journalists 
from those countries very happy indeed. These lists proved to be enormously 
helpful during the HSBC Files investigation. Rather than having to search 
through all the data, journalists could concentrate on the documents that 
concerned individuals from their own country. 

Not all our colleagues across the world will be working under such 
comfortable conditions as ours. By this time, we have effectively been released 
from normal duty for six months to work on the project. We know from previous 
projects that colleagues in Africa and Latin America, for example, will be 
working on this investigation while also writing daily stories for their 
newspapers or producing topical TV programmes on all kinds of issues. Such 
lists will be invaluable to them — they offer a great starting point and will save 
weeks of searching. 

It has now become clear that the data sent to us by the anonymous source over 
the past few months will be the biggest project the ICIJ has ever managed. 
Journalists from every continent will be involved in it. Day after day, ICIJ 
project manager Marina Walker is on the phone with one ICIJ member after 
another to tell them about the project: not too much, as the circle of initiates 
cannot grow too big at first, but enough to get them to bite — and to start 
investigating. 

The project has now been given a working title: Prometheus, like the Star Trek 
starship. The names of ICIJ projects have traditionally been chosen by data 
specialist Rigo Carvajal. And Rigo loves Star Trek. The HSBC Files project was 
known internally at the ICIJ as ‘Enterprise’, the Luxembourg Tax Files as 
‘Voyager’ and the investigation into the World Bank’s questionable projects as 
‘Odyssey’. All Star Trek starships. 

And now we have Prometheus. 


We have reached the end of May and the ICIJ members and media organizations 
who have already confirmed their involvement — including Le Monde, the 
Guardian, the Organized Crime and Corruption Reporting Project and the Swiss 
Sunday newspaper SonntagsZeitung — are still waiting for the official go-ahead 
for the project. But we are aiming to publish in November. Which means we’ll 
have to get our skates on. It is time to organize an initial meeting, says Marina. 
A meeting in which we plan, discuss and allocate tasks; a meeting that will help 
our colleagues to estimate how much time and effort they wish to invest in the 
project. These initial conferences have become a part of the modus operandi at 
the ICIJ, a lesson learned from the Offshore Secrets project. Back then, all the 
important details were discussed by email and phone. A number of the project 
partners had never met face to face and — to put it mildly — not everyone 
demonstrated the same level of mutual trust and readiness to share information. 

For that reason, every major project since then has started with a conference. 
The Luxembourg Tax Files project meeting was held in Brussels; the HSBC 
Files conference in Paris. Over the course of a day, the ICIJ explains what the 
project is about, and discusses issues such as the exchange of research results 
and planned publication dates with the assembled journalists. The Prometheus 
meeting was actually planned for May, or June at the latest, here in Munich. But 
then the mountain of data kept growing and it became clear that if we met in 
June, we still wouldn’t really know the full scope of the data we had in our 
possession. So we keep postponing, over and over again. . . 

But the source just keeps on sending more material. 

We come up with a solution. We will hold two meetings. A big meeting in the 
SZ Tower in Munich sometime in late summer and a smaller one before the 
summer holidays for the benefit of all the media organizations that wish to put 
large teams on the case. Marina suggests the ICIJ headquarters in Washington as 
a venue. 

We agree — even though the trip will do nothing to boost our department’s 
meagre travel fund. 

Julia Stein from the research department at broadcaster NDR will be joining us 
in Washington. She is also an ICIJ member and an amazing colleague. We have 
already worked with her on Offshore Secrets, the Luxembourg Tax Files and the 
HSBC Files. By this point, Julia’s team is already acquainted with the project, 
and more and more NDR colleagues are getting involved in the investigation. 
Another German broadcaster, WDR, will also take part — the Stiddeutsche 
Zeitung established an association of investigative journalists with the two 


broadcasters in 2014. 
Our two-man operation is suddenly beginning to look like a global 
investigation. 


ON FISHING, FINDING AND FINE ART 


The urge is too powerful. The urge to rummage manually through the mountain 
of data that has now passed the terabyte mark. We know it hardly makes sense 
now to search Nuix for individual people, terms or facts because we will merely 
have to repeat each search, which leads to nothing as soon as we acquire more 
data. But we just cannot stop ourselves. Whenever we can, we snatch half an 
hour on the laptop and cast our net into the sea of data that is growing larger and 
larger week by week. We go ‘fishing’, as our ICIJ colleagues call it. ‘Happy 
fishing!’ 

The funny thing is, we almost always find something. Every time we spend 
more than twenty minutes entering keywords we find some kind of trail, 
something that sounds illegal, unusual, amusing or downright exciting. But we 
cannot follow these trails to their conclusion there and then because we simply 
do not have the time and each case is complicated in its own unique way. So we 
save everything that sounds promising in an encrypted folder on our computers, 
label it and then. . . it just lies there. 

But sometimes what we find is so good that we immediately dive in more 
deeply. For some reason — you soon forget the exact flash of inspiration that 
drives you to try a particular approach when ‘fishing’ — we enter the word 
‘painting’ and get hundreds of results. Not ideal because we hadn’t planned on 
spending that much time on random searches. But one of the first hits refers to a 
painting by Amedeo Modigliani called Seated Man with a Cane. 

Modigliani was an Italian painter who lived and worked in Paris at the 
beginning of the twentieth century, surrounded by contemporaries such as Pablo 
Picasso and Pierre-Auguste Renoir. A quick search reveals that he painted the 
image in 1918. As its name suggests, it depicts a man with a cane and it is worth 
several millions. 

We can already see from the search mask preview that the file that mentions 
our painting is a court document. We call it up from the data and see that a 
Frenchman named Philippe Maestracci is taking the Helly Nahmad Gallery in 


New York to court over this very painting. Maestracci is claiming rightful 
ownership of the painting, which he says the Nazis stole from his grandfather. 
However, the Helly Nahmad Gallery claims that it does not own the painting, 
nor is it currently exhibiting it. 

Helly Nahmad is the very rich son of the even richer David Nahmad, a 
billionaire of Lebanese extraction with an Italian passport who lives in Monaco. 
Helly Nahmad is a well-known figure in the world of New York’s rich and 
beautiful. He runs the Helly Nahmad Gallery — a gallery for impressionist and 
contemporary art not far from Central Park.+ 

Art experts regard the Nahmads as the biggest buyers on the international art 
market. They store some of their collection — which includes several Picassos — 
in a high-security warehouse in Geneva known as the Freeport. 

Within the same folder as the court document — the folder for an offshore 
company called International Art Center (IAC) — we find a fax sent in late 2011 
by the wealth management department of a large bank. It asks Mossack Fonseca 
to have the Mossfon-appointed directors of International Art Center sign a 
document attesting that the company owns Modigliani’s Seated Man with a 
Cane. Two documents are attached: a proof of purchase issued by Christie’s 
auction house in 1996 and what appears to be some kind of certificate of 
ownership. Research is so easy sometimes! Both documents name International 
Art Center as the owner and state that the painting is in storage at the Geneva 
Freeport, where works owned by the Nahmads are also stored. 

A long article published in the Wall Street Journal in October 2014 helps us 
understand the bigger picture. The story, as told by the Wall Street Journal, 
begins in Paris in 1946 when the Jewish art collector Oscar Stettiner writes a 
letter to the authorities. In it, Stettiner outlines his claim to ownership of 
paintings that were forcibly sold under the Nazi occupation of France. Stettiner 
fled Paris in 1939, leaving behind his art collection. The Nazis appointed an 
administrator for his gallery and the collection, which included Seated Man with 
a Cane, was sold in four public auctions. 

In 1947 a state investigator began checking Stettiner’s claim for the return of 
the Modigliani painting. He came to the conclusion that a man called van der 
Klip had bought Seated Man with a Cane in 1944, and noted the address as Rue 
de Courcelles 36, Paris. In addition to the Modigliani, the buyer also purchased a 
carpet and a painting depicting Oscar Stettiner as a child. 

It appeared that Oscar Stettiner was about to recover his painting. The 
investigator tracked down van der Klip and set up a meeting with him and 


Stettiner in a Paris courtyard, where the carpet was stored in a shed. Van der 
Klip was prepared to return it. 

But the Modigliani wasn’t there. 

Van der Klip claimed that he had sold the painting to a Monsieur Mariage Eu 
de Saint Pierre, who was also present at the meeting. He, in turn, explained that 
he had sold Seated Man with a Cane to an American officer for 25,000 francs in 
October 1944. He claimed the two men had met in the Café du Rohan on the 
Place du Palais Royal, close to the Louvre. However, the investigators were 
unable to find a name or an address for the purported American buyer. 

And so the Modigliani remained missing for almost fifty years. 

The painting resurfaced at a Christie’s auction in London in 1996, where, 
according to our documents, it was bought by International Art Center. The only 
information provided in the catalogue regarding the painting’s provenance is that 
it was being offered for auction by an anonymous seller. International Art Center 
paid $3.2 million for it. 

Twelve years later, in the autumn of 2008, Seated Man with a Cane was up for 
sale once more, this time at Sotheby’s. By then, the value was estimated at 
between $18 million and $25 million. The catalogue stated that the painting was 
possibly from the collection of Jewish art dealer Oscar Stettiner. So there was a 
distinct possibility that the Modigliani was looted Nazi art. Seated Man with a 
Cane did not find a buyer at Sotheby’s. 

A little later, however, Mondex heard of the case. The Canadian art restitution 
company was established in the mid-1990s to track down artworks confiscated 
by the Nazis and return them to their rightful owners or heirs. For a contingency 
fee, of course. Mondex found Stettiner’s sole heir in France, the eventual 
claimant Philippe Maestracci, and it started searching for the painting on his 
behalf. It needs evidence that Stettiner had really owned the Modigliani. The art 
detectives come across a photo of the painting in the Venice Biennale archives, 
with a caption stating that Oscar Stettiner loaned it to them in 1930. 

The only question is: where is the painting now? 

After the 1996 auction, the Modigliani was exhibited once at the Musée d’ Art 
Moderne in Paris, once at the Royal Academy of Arts in London and twice at the 
Helly Nahmad Gallery in New York. Maestracci therefore begins with Nahmad. 
He has his lawyer send two letters asking Nahmad for a meeting to discuss 
Seated Man with a Cane. He wants the painting back. Both letters go 
unanswered. 

So in 2011, Maestracci takes the Helly Nahmad Gallery to court in New York 


— these are the documents we first saw in the data. When we widen the scope of 
our search, we discover that the case is still pending at a higher court. We 
discuss the case with the ICIJ — after all, the organization is based in 
Washington, and New York is only a few hours away by train. Perhaps one of 
our colleagues has time to travel to the next court date. 

Marina Walker tells us that Jake Bernstein, who won the Pulitzer Prize a few 
years previously for his work covering Wall Street in the run up to the financial 
crisis, has already been working on the story. He read our first forum post on the 
case and immediately began further research. Jake has also been in touch with 
the Mondex art detection agency and the claimant’s lawyers. 

We search PACER (Public Access to Court Electronic Records) for 
information on the Modigliani painting stolen by the Nazis. PACER is a very 
useful online database. For just a few cents per item, you can access documents 
from almost any court case in the USA: defence documents, prosecution 
documents and applications to produce evidence. Virtually all the paperwork 
produced over the course of a court case is there. 

We look for the Philippe Maestracci v Helly Nahmad Gallery case. 

In a report that is dozens of pages long, Maestracci’s lawyer traces the 
painting’s journey from Oscar Stettiner to the Nazi-appointed intermediary, from 
John van der Klip to the Helly Nahmad Gallery. The report appears to be 
conclusive and well documented. 

But Helly Nahmad affirms in writing that his gallery did not ‘at any time’ own 
the Modigliani. He merely borrowed the painting for a single exhibition at his 
gallery. Furthermore, Nahmad’s lawyers present a document from Christie’s 
showing that the painting was sold in 1996 to the Panama-based company 
International Art Center, not to the Helly Nahmad Gallery. 

Maestracci can offer no counter-argument and he withdraws the lawsuit in 
2012. 

In 2014, he — or a court-appointed administrator for the ‘estate of Oscar 
Stettiner’ — makes another attempt. The defendant this time is not only the Helly 
Nahmad Gallery, but also International Art Center, which allegedly owns the 
painting, as well as Helly Nahmad and his father David. The IAC and the 
Nahmads are all represented by the same star lawyer, who declares that 
International Art Center is the painting’s sole owner. ‘Not anyone else in the 
world, including defendants Helly Nahmad Gallery, Helly Nahmad or David 
Nahmad, owns the painting.’ 

That is true, from a strictly legal point of view. But our data reveals the 


following: International Art Center S.A. was founded in 1995 by Giuseppe 
Nahmad, who is David Nahmad’s brother and Helly Nahmad’s uncle. In 2008 he 
reassigned half his [AC shares to David Nahmad. And we find a document dated 
22 October 2014 that is signed by David Nahmad in his role ‘as sole 
shareholder’. The same David Nahmad who in 2015 claimed through his lawyer 
before the Supreme Court of the State of New York that the painting was owned 
solely by IAC. 

So we see how the painting’s ambiguous ownership status leads the heir of the 
Paris art dealer to bring legal proceedings against the wrong party twice and how 
the Nahmads profit from the opacity of their offshore business structure. 

We were keen to discuss IAC and Seated Man with a Cane with the Nahmads 
but our request for a meeting remains unanswered as this book goes to press. 
Meanwhile, the New York lawyer who represented them and IAC in court stated 
in an interview that the question of who owns IAC was ‘irrelevant’. 

That, sadly, is true. Even if the claimant ultimately succeeds in asserting his 
claim against IAC, he still might not get his hands on the painting. Enforcing a 
US judgment against a Panama-based shell company can be hard work. One 
lawyer with whom we discussed the case at length concluded his assessment 
with the words: ‘Have fun. . .’ 


[] 


There are just a few days until our meeting in Washington and we have our 
flights already booked. We will be heading to Washington at 11.40am on a 
direct flight from Munich with United Airlines. 

The flight could be a little tricky because we will be taking the data with us on 
the journey. We have more than a terabyte now, which means that we will have 
to encrypt a hard drive, set up a hidden area on it and upload the data. 

We are familiar with that process but until now the hard drives have always 
been transported across the Atlantic by others. This time the hard drive will be in 
our luggage and knowing that is not likely to help us relax. 

What if we are detained? David Miranda, the partner of Edward Snowden’s 
confidant Glenn Greenwald, was detained by British police in Heathrow at the 
height of the NSA affair. Officials searched his luggage. ‘They were threatening 
me all the time and saying I would be put in jail if I didn’t cooperate’, Miranda 
later said. He eventually revealed the passwords to his hard drives. 

What if the same thing happens to us? What if the US authorities know about 
the data? Data the police, intelligence services, tax authorities and stock 


exchange supervisory authorities would surely be interested in. Data that may 
well reveal state scandals. 

Would we be cool-headed enough to reveal only the external password to the 
US police? Without sweating, or stuttering, or indicating in some other way that 
there is more information on the hard drive? 

In short: we are a little nervous. 


A VIEW OF THE WHITE HOUSE 


Landed safely in Washington. 

It’s time to take a deep breath and stay cool. Don’t think about the data in the 
suitcase. Everything is fine, we tell ourselves. We’re just two normal journalists 
from Germany. But we still feel uneasy as we walk towards the baggage claim 
area. 

The worst thing that could happen is that a customs official is standing there 
with the hard drive from our luggage. 

The good thing is that we cannot actually grant anyone access to the data. The 
password to the secret section of the hard drive is forty characters long and we 
deliberately did not bring it with us, not on the computer, not on our phones or 
hidden on our bodies. We only have the password for the section of the hard 
drive that we have packed with boring old folders for the benefit of US Customs. 
We will be sending the ICIJ the password for the secret hard drive by encrypted 
message once we return to Germany. 

Unfortunately, we have a long wait before we even reach the US Customs and 
Border officials. The queue for the customs desk is enormous. The zig-zags of 
people waiting patiently go on and on endlessly. It’s a miracle that people don’t 
snap and go berserk on a regular basis here at Washington Airport. Low ceilings, 
thousands of passengers inching forward slowly, all sweaty and exhausted from 
their journeys, stressed adults and bawling kids wherever you turn. And at the 
end of the queue, an army of police and customs officers waiting to decide 
whether it was all in vain. 

It must be hell for anyone who has even the slightest phobic tendency. And it 
is not ideal for anyone who fears they might be picked out by customs officers 
and questioned about the stolen data in their luggage. 

We edge forward at an agonizingly slow pace. At a certain point we become 
separated by the queue, or more precisely by a customs officer who points us in 
different directions. We follow his directions. At the counter, we face some 
brusque officials, probing gazes and a professional nod. But no questions. We 


collect our luggage and that is it. 
The data has arrived on US soil. 


[] 


It is late afternoon and we go straight to the ICIJ in the centre of Washington. 
The ICIJ offices are on 17th Street Northwest, not far from the White House. 
There, on the second floor, they have workstations for about ten journalists. We 
sit down to a meeting with ICIJ Director Gerard Ryle, his deputy Marina Walker 
and the head of data Mar Cabra to discuss the final details for the following day. 

Marina smiles at us and asks: ‘Are you two ready for your presentation 
tomorrow?’ 

We nod amiably. 

We have not had long to work on our presentation. Marina only told us a week 
beforehand that we would be presenting the project ourselves. ICIJ staff had 
given the presentation at the preliminary meeting of the Luxembourg Tax Files 
project in Brussels, with a few contributions from Edouard Perrin, the first 
journalist to see the leaked data. There was also an expert present to explain the 
secret advance tax rulings of large corporations. The preliminary meeting of the 
HSBC Files project took a similar course, with ICIJ staff explaining what it was 
all about: the treasure trove of data leaked by whistle-blower Hervé Falciani at 
HSBC in Geneva. Our two Le Monde colleagues who lifted the veil on that 
story, Gérard Davet and Fabrice Lhomme, just sat at the table smiling and 
answering questions. But we are expected to give a presentation. In English. In 
Washington. 

We were a little anxious when we put together the first PowerPoint slides in 
Munich. Marina Walker’s email did nothing to alleviate that nervousness: 
‘Bastian and Frederik: Please prepare thoroughly for the presentation so that you 
both inspire and help the other journalists.’ 

Marina is great. She is the one who runs the show when it comes to these 
international collaborations and it is she who ensures that all the journalists 
involved know how important virtues such as punctuality, exactness and 
reliability are. And, as you see, Marina can be very direct. 

But she is right. Some of our forty colleagues making the journey have only a 
vague idea of what’s going on: a leak, secret offshore data, an intriguing initial 
scent. It is our job to get them excited. 

We take Marina’s email as the impetus to go through our presentation a third 
time on the plane. And then a fourth time. When we arrive at our hotel after the 


chat at the ICIJ, we go over it again. 
[] 


Shortly after 9am the following morning, after an overpriced breakfast and a 
sweat-inducing walk in the muggy 30°C heat, we are standing in the First 
Amendment Lounge on the thirteenth floor of the National Press Building in 
Washington DC, in a conference room with a view of the White House. Before 
us are colleagues from all over the globe: Spain, Italy, Britain, Argentina, Costa 
Rica, the USA and many more countries. They include some of the world’s best 
investigative journalists, such as James Ball from the Guardian, Jake Bernstein, 
and Uri Blau from Israel, whose stories have sparked national crises in the past. 

They are all sitting around a long table listening to what we have to say. 

Our plan in the First Amendment Lounge is to try to grab our audience’s 
attention immediately by outlining the magnitude of the leak: 


The biggest leak ever, with 1.5 terabytes of data already on hand and the 
mountain growing steadily. 

An eerily up-to-date leak. The most recent emails are just a few days old. 

Detailed information concerning about a quarter of a million offshore 
companies. 


We had asked a colleague from the layout department to design a graphic that 
put the various leaks into perspective: our 1.5 terabytes, Offshore Secrets’? 260 
gigabytes, and the WikiLeaks files, most of which were just a few gigabytes in 
size (but which were very influential nevertheless). When presented in that 
context, our haul really does look very impressive and the room quietens down 
immediately. 

We have won over our audience and after a few minutes we have forgotten our 
nervousness. We talk and talk and talk. We talk about Putin’s alleged best friend, 
about the Icelandic prime minister, about Bashar al-Assad’s cousin, about the 
mysterious German and the $500 million in gold in the Bahamas account. As we 
talk, we can tell from our colleagues’ faces that we won’t have to work very hard 
to persuade anyone to get on board with Prometheus. 

We basically talk non-stop from 9am until lunchtime. We explain the structure 
of the data, where the different information is to be found, what the best way to 
search is and what the problematic areas are. 

In the afternoon we draw up a plan of action: when to publish, what specific 


topics to search for and which stories to tackle in groups. The great thing about 
this collaborative project is that we have expanded the expertise of our 
department at the SZ overnight. There is hardly anyone who knows more about 
FIFA than James Oliver; the Argentines know all the ins and outs of the 
Kirchner story; and our Icelandic colleague will be a much better judge of the 
Gunnlaugsson case than we could ever be. But we are even more delighted by 
our colleagues’ reactions. We were already convinced of the importance of ‘our’ 
leak and that it called for international collaboration. But it is good to hear it 
from the mouth of a Pulitzer Prize-winner nevertheless. And to see that the BBC, 
the Guardian and Le Monde are equally excited and are putting teams on it then 
and there. TV colleagues from the French press agency Premiéres Lignes and 
US broadcaster Univision are there with cameras to film the conference and to 
interview us. 


[] 


The meeting in Washington changes the way we view our work. It is no longer 
our small project. It is now a mammoth project and we will have to take care not 
to sink under its weight. After all, we will be at the centre of a globally 
coordinated research project. Other publications may be set up to handle such 
assignments, or could at least quickly adjust, in terms of staff, equipment and 
costs. They say that the Spiegel, when it got its hands on WikiLeaks, drafted 
thirty members of staff to sift through the documents. Thirty people! 

The Süddeutsche Zeitung is not prepared for that kind of project in any shape 
or form. How could it be? Our desk is currently staffed by four people — and 
those four are expected to contribute to day-to-day reporting. 

We do not have an employee who is an expert on data journalism. There is no 
one on the team who is fluent in Spanish, although more than half the leaked 
documents are in that language. We do not really have a budget for additional 
staffing or for extensive upgrades to our technical equipment. All we have is the 
absolute trust of our head of department and the support of our Editors-in-Chief 
Wolfgang Krach and Kurt Kister. Wolfgang Krach was previously an 
investigative reporter at the Spiegel and he has never lost his passion for big 
research stories. 

We head in a swarm of reporters from the National Press Building to the 
restaurant the ICIJ has booked for dinner. The route helps to further elevate the 
celebratory mood, leading as it does directly past the White House. From there 
we continue to Farragut Square and up Connecticut Avenue to the Dupont Circle 


— the area of Washington we know so well from TV series such as House of 
Cards and The West Wing. 

After the meal we try various rare beers on the terrace of a pleasantly quiet 
restaurant. One after another, colleagues — investigative journalists to the core — 
take a seat next to us to learn a little more about the source. By now we are 
accustomed to the standard reaction to our answer when they ask whether we 
really have no idea who the source is. 

Are they really anonymous? 

We smile. 

Yes, really. 

We smile. 

That is the truth. 


[] 


Our third day in Washington is a work day. The ICIJ machine is rolling, the 
course has been set. All that is left to do is to decide on the exact coordinates. 
Which are the most important cases? When should we break the story? Which 
subjects should we tackle together? 

We sit in a small conference room surrounded by data journalism experts — 
what the ICIJ agenda called a ‘Geeky data meeting’. Our colleagues are 
discussing the best way to filter, sort and browse the data using special 
programs. We sit on the sidelines smiling amiably. 

The one thing we quickly grasp is that a large number of research paths are 
closed to us as long as we search the data using conventional approaches. 

We need a real expert. 


[] 


Christophe Ayad, a French colleague, takes us to one side at this meeting. ‘Look 
here,’ he says, ‘I’ve found Alaa Mubarak in the data, the son of former Egyptian 
president Hosni Mubarak.’ We have found the next case involving a president. 
Ayad tells us that he discovered the name of the autocrat’s son in the documents 
of a company called Pan World Investments Inc. 

We pull up the relevant company folder from the data and click through the 
documents, year by year, document by document. Nothing unusual, simply a 
normal offshore business: a certificate of incorporation issued in the British 
Virgin Islands in 1993, fee invoices, the occasional change in nominee directors. 
That’s all. 


It seems as if it is still business as usual even in 2011, when Hosni Mubarak is 
deposed by the Egyptian people and his sons Alaa and Gamal are arrested. The 
sons are regarded by Egyptians as a prime example of a rapacious elite that 
enriches itself at the expense of the population at large, sucking the state dry in 
the process. They are put on trial. Shortly before our meeting in Washington 
they are convicted of embezzlement. And so, reality and data converge. 

Alaa Mubarak, the now convicted despot’s son, has been the ultimate 
beneficial owner (UBO) of Pan World for two decades. He retains that position 
despite the Arab Spring, his father’s fall from power, his own trial and the 
negative headlines in the global media. Only in 2013, when the financial 
authorities in the British Virgin Islands request information about Pan World, 
does an interesting dialogue develop between Mossack Fonseca’s compliance 
and legal departments. The authorities want information. . . missing information. 

Alaa Mubarak’s name should have triggered alarm bells. His company, Pan 
World Investments Inc., should have been classed as ‘high risk’ in an internal 
review. Instead, Mossfon still rated the shell company as ‘low risk’ in 2012 — 
one year after the events of the Arab Spring. Now the head of the legal 
department warns that they should under no circumstances admit this to the 
authorities. It would be an admission that ‘our risk assessment formula is 
seriously flawed’. 

After all, Alaa Mubarak is not just some politically exposed person (PEP), 
writes a colleague from Mossfon’s compliance department. He is a sanctioned 
person, an international outlaw. The EU put the former Egyptian dictator’s son 
on its sanctions list in 2011 ‘for misappropriation of state funds’ + 

Surely such a circumstance would be noticed immediately by a company that 
assured us in February 2015 — in answer to a query relating to the Commerzbank 
raid — that it adhered strictly to the ‘Know Your Customer’ guidelines and that it 
not only carries out due diligence procedures for all new customers, but that it 
also makes ‘periodic checks and updates on existing customers’. 

Know your customer? 

One Mossfon lawyer writes to her colleagues in August 2013: ‘The truth is we 
did not identify the beneficial owner in the beginning (as we should have done).’ 
Mossfon had the son of a dictator on its files and even had a copy of his passport 
— but apparently it had no idea who he was.? 

In our Washington hotel we stumble upon a spreadsheet drawn up by a 
Mossfon employee. It is a list of all the Mossfon companies in the Seychelles, 
sorted according to whether Mossfon knows the beneficial owner or not. The 


result? Of the 14,086 companies, Mossfon knows who the real owner is in only 
204 cases. 

That is a sad commentary. And it shows how irresponsibly Mossack Fonseca 
skirts its responsibilities. These companies could be owned by any manner of 
criminal — murderers, mafiosi, dictators — and Mossfon is glad to be at their 
service. 


13 


“REGARDING MY MEETING WITH HARRY 
POTTER. . .’ 


[john doe]: What do you think will happen to the firm, once this is all published? 

[SZ]: I think the firm will face problems. Anyone in this business of keeping secrets has to expect big 
trouble. Not only with its customers. 

[john doe]: What about Jiirgen Mossack and Ramon Fonseca? Do you think they will actually go to 
jail or get extradited, or try to escape and hide somewhere? 

[SZ]: Not really. Panama has its laws fairly well adapted to this type of business, if we understand it 
correctly. Apart from the sanctions violations. But the Panamanian authorities would also have to 
really want to go after them — which is to be doubted. 

[john doe]: But Jiirgen Mossack is German. . . 

[SZ]: He probably should not travel much. But if he stays in Panama, he will have to fear probably 
little. 

[john doe]: Sad, but I think you’re right. Do you as a journalist not get upset seeing people like this get 
away with it? 

[SZ]: We do. But law enforcement is not our job. . . 


It is now August and the mountain of data has grown to more than 2 terabytes. 
Over these past months, the two of us have clicked through hundreds of 
companies and thousands of emails. And we have a further 100 or so colleagues 
in more than fifty countries conducting their investigations. By this point, the 
Prometheus investigators have opened and examined tens of thousands of 
company folders. The image of Mossack Fonseca that is emerging contrasts 
starkly with the image the law firm is keen to convey. The documents we and 
our colleagues view suggest that the company is not your standard law firm that 
is, inevitably, unlucky enough to have the odd client or two who act outside the 
law. It is, rather, a company that talks publicly about fine-sounding concepts 
such as compliance and due diligence; it that is in reality nowhere near as clean 
as it would have us believe. 

A good example of this is Mossack Fonseca’s role in the Siemens Affair and 
the Latin American slush funds. In all this Mossfon plays a supporting role only; 
the Siemens directors are clearly the driving force behind the plan. But Mossack 
Fonseca not only helps the directors to funnel illicit money into clean channels; 
it also shows in passing what all the talk about supposedly cast-iron principles is 


really worth — not much. 

When Mossack Fonseca has come under attack from journalists in the past, the 
company’s standard line of defence has been that it has no contact with end 
clients, that it does not carry out bank transfers on behalf of end clients and that 
it is committed to the ‘highest standards’ of due diligence. It would never 
support or tolerate unlawful acts. 

We are still dumbfounded when we read statements like these even though we 
should be familiar with such excuses after all these months. But the confidence 
with which Mossack Fonseca whitewashes its affairs staggers us every single 
time. 

The Mossfon advisers knew the acting Siemens managers — end clients — 
personally. We know they met in a Panamanian hotel and shopping centre. We 
have proof that Mossfon advisers carried out bank transfers on behalf of 
individuals and various shell companies. They, as ‘third parties’, have even 
opened, managed and closed accounts for hidden Siemens slush funds. As late as 
2012 they transfered about $2 million to a numbered UBS account without 
paying more than lip service to due diligence procedures. 

One Mossfon employee’s objection that the Siemens manager Hans-Joachim 
K. was embroiled in a bribery scandal is brushed aside by his colleague at 
Mossack Fonseca, who says that is water under the bridge. Yet the million-dollar 
sums sitting in companies owned by those former Siemens managers came from 
exactly those same ‘waters’. 

In this case alone Mossack Fonseca ignores so many warning signs it is almost 
incredible. The parties concerned were at times reluctant to provide sufficient 
information about themselves, they used multiple accounts, they acted 
conspiratorially, they gave conflicting explanations about the origin of the 
money and they had even been investigated for financial crimes. Any bank 
employee with even the slightest level of authority learns to interpret the signals 
money laundering experts warn about. And it is not that they are naive at 
Mossack Fonseca: we discover that one Mossfon subsidiary even offers seminars 
on how to combat money laundering. 

Despite that, Mossfon staff members repeatedly ignore the signs. 

The Siemens case demonstrates how little Mossfon cares about whether 
questionable things go on at the companies it administers. Mossfon staff 
members were aware of the dubious Siemens funds by the summer of 2008 at 
the very latest, but they did not drop the client. On the contrary, it appears that 
Mossack Fonseca even helped to transfer money back and forth: K.’s agent at 


Mossfon gave the Berenberg Bank false information regarding the origin of the 
money and Mossfon employees transferred this money from one account to the 
next, and finally to the accounts of Hans-Joachim K. himself and another 
Siemens colleague. 

Mossack Fonseca did all this while skilfully concealing tell-tale details by 
using code words, abbreviations and anonymous email addresses. 

But the Siemens case is not the only one in which Mossfon staff members 
operate in such a clandestine manner. We find dozens of cases in which 
Mossfon’s wealth management department supplies end clients — with whom the 
firm purportedly never has contact — with anonymous email accounts. These 
email addresses end with ‘@tradedirect.biz’, an email service we have never 
heard of previously. On its website, www.tradedirect.biz, the company offers 
‘global trade and professional consulting’, supposedly with a focus on 
‘international exporting and importing’. There is only one link, which flashes on 
one side of the screen: ‘secure email’. When you click on it, it leads you directly 
to the log-in page of a standard Outlook server. Very similar to the one we have 
at the Stiddeutsche Zeitung, incidentally. But whose system is it that you are 
logging in to? 

A little more research in the data reveals the answer. The internal email server 
belongs to Mossack Fonseca. After further research we discover that Trade 
Direct International, whose email domain is used for clandestine correspondence 
by so many Mossfon clients, is actually part of the Mossack Fonseca cosmos. 
According to our data, Jürgen Mossack and Ramon Fonseca hold the Trade 
Direct International shares through a dummy corporation called Serena Services 
LLP, which is based in the UK. The website that purports to offer import-export 
services appears to be no more than a facade.+ 

We find internal emails that give clear instructions on how clients can log in to 
these accounts. These emails include client account addresses featuring 
codenames (e.g. ‘winniepooh@tradedirect.biz’), screen names (‘Winnie the 
Pooh’), user names (‘winnie’) and passwords (‘win48491’). In theory, we could 
now log in to dozens of secret email accounts. But of course we don’t, despite 
the great temptation. 


[] 


Some of the fake names are quite bizarre. Alongside ‘Winnie the Pooh’ we come 
across boy wizard ‘Harry Potter’ and ‘Daniel Radcliffe’, the actor who made his 
name playing the role. Other aliases include ‘fighter’, ‘panama’, ‘oktoberfest’, 


and even ‘father’, ‘daughter’ and ‘son’. 

It gets even better. The Mossfon advisers actually address their clients in 
emails by these fake names, as if they were in a bad spy movie: 

‘Dear Harry’ 

‘Hi son’ 

‘Hello father’ 

Our favourite line comes from an email to ‘Winnie the Pooh’: ‘Regarding my 
meeting with Harry Potter. . .’ 

Incidentally, ‘Harry Potter’ is a successful American lawyer, as is ‘father’. 
‘Winnie the Pooh’ is a company director. And ‘fighter’? He is a former boxing 
world champion. . . 

These client emails, sent via the internal Mossfon server, arrive in the inboxes 
of Mossfon staff members with only the fake names displayed, which means that 
we have to check who ‘father’, ‘Harry Potter’ or ‘Bruni’ really is each time. It is 
also striking how many of these clients who use anonymous email addresses 
provided by Mossack Fonseca’s strange Trade Direct company seem to have 
problems with undeclared money. Even more interesting, however, is the fact 
that Mossack Fonseca advisers often appear to be fully aware of these 
problems. . . 

Here are a few examples: 

A client gets in touch because he wants to cash a couple of cheques worth 
about $100,000, but without leaving ‘a trail’ to him or his company. Any bank 
trainee would, at this point, be asking: well, why would you want to do that? 

But the Mossack Fonseca advisers simply get creative and seek to offer the 
client the best possible solution. One of the suggestions made is to put the 
money in an anonymous trust, which then buys shares in a company, which 
makes a donation to the client. Alternatively, one of the Mossfon lawyers 
advises, they could set up an offshore company and include a clause in the 
Statutes stating that ‘this company named ABC also trades under the names XYZ 
and BLA’. This would allow them to open a bank account under one of these 
other names. 

A Mossfon adviser comes up with an equally unusual suggestion for two other 
clients. Client A wants to move a substantial amount of money out of the US. 
Client B wants to move his money discreetly from Singapore back to the US. 
Mossack Fonseca’s plan is that the two clients should transfer the money to each 
other. Client B sends $800,000 from his account in Singapore to a Swiss account 
belonging to client A, and client A sends money from his account in the US to 


client B’s account. This would leave the two with $800,000 exactly where they 
want it. The Mossfon agent explains, however, that they would have to come up 
with ‘another reason’ for the transfer from client A to client B within the US. A 
kind of ‘services agreement’, perhaps, whereby client A pays client B for 
services — ones that are never rendered? 

Mossfon really suggests issuing a fictitious invoice. A how-to guide to 
deception. 

Mossack Fonseca’s pain threshold is astonishingly high. It even advises 
‘daughter’ to issue the reference letter to Mossfon, concerning a transfer to 
Switzerland, because Mossack Fonseca ‘is a law firm. This would avoid creating 
the impression that you are moving money abroad.’ Mossfon is helping to 
construct a facade and it promises it will ‘try to somehow avoid compliance’. 

What was that? Avoid compliance? 

If such examples appeared only occasionally, they could perhaps be explained 
as the isolated failures of individual employees. But these are not isolated cases. 
We see time and again how Mossack Fonseca cooperates in cases involving 
suspicious transactions and requests.2 


[] 


We come across the case of another former Siemens director who seems to have 
used Mossack Fonseca to transfer money discreetly from Switzerland to 
Panama. His name appears in emails received by Mossfon in late November 
2012, a few days after a new tax treaty falls through between Germany and 
Switzerland, which would have allowed tax evaders to remain anonymous and 
avoid prosecution. A client adviser at the Andorran Andbank states that they 
wish to use Mossfon’s escrow service — i.e. to transfer money elsewhere via 
Mossack Fonseca. 

An email exchange in December 2012 reveals that the client has accumulated 
quite a fortune through business deals in the USA and Sweden. A little over €2 
million and 1 million Swiss francs are sitting in a number of Swiss accounts. 
According to the emails, the former Siemens director wants to transfer this 
money to an investment account with Andbank in Panama. We also discover a 
copy of his passport, valid until 2014, among the documents, and a testimonial 
by a Zurich asset manager, according to whom the ex-Siemens man has been a 
client since 2008 and is a ‘reputable and trustworthy person’. 

The money appears to be transferred in several instalments from one account — 
which is, according to our documents, not in his name but in that of a shell 


company — to a trust company, which in turn transfers it to Andbank Panama, to 
another trust company. This company is owned by Mossack Fonseca. The 
instructions received by Mossack Fonseca state that the money should be 
transferred from Mossfon’s account to the ‘end client’s’ immediately. However, 
it is vital that the name of the account holder does not appear on the transfer. 

In this way a total of about €3 million was moved from Switzerland to Panama 
in December 2012 without the former Siemens manager’s name being visible to 
anyone on the outside. The final recipient is, however, explicitly named in 
internal communication at Mossack Fonseca. 

Why did this ‘reputable and trustworthy person’ transfer this money from the 
Swiss account to an investment account in Panama by such a circuitous route? 
Why was a much more complex and expensive method chosen? For the secretive 
bank transfer, Mossack Fonseca charged a fee of 0.5 per cent of the transferred 
amount — about €15,000 for moving a total of €3 million. €15,000 for a service 
that could have been completed using a standard transfer, which is free at many 
banks. 

But, of course, a standard transfer — and therefore also the former Siemens 
director’s name — may have been visible to the tax authorities.2 


[] 


Mossack Fonseca’s core business is not trust services such as the one used by 
this former Siemens director, but the large-scale sale of dummy companies and 
trusts to institutional intermediaries. These intermediaries pass on the companies 
to their respective customers — ‘end clients? as Mossfon refers to them. This 
bread-and-butter aspect of the Mossfon business does not always involve 
astronomical sums of money and they do not require Harry Potter email 
addresses. Your average estate agent, dentist or businessperson can simply park 
their money in these companies to minimize their tax liabilities. In reality, 
Mossack Fonseca usually knows very little about these people. Internal Mossfon 
documents reveal that in thousands of cases they do not even know who owns 
the offshore companies. 

But one thing Mossfon often does know all too well is the reason why many 
banks and asset managers need these shell companies. In their roles as 
salespeople, Mossfon staff members regularly meet their clients, especially the 
regional shell company salespeople, in countries such as Switzerland, 
Luxembourg and the UK. 

Mossack Fonseca employees submit written reports on these meetings — there 


is a special field for this purpose in the firm’s internal computer system. The 
reports we have access to could hardly be clearer. 

There are dozens of entries on banks whose clients have ‘undeclared funds’, 
and who are therefore ‘very sensitive’ when it comes to confidentiality. Writing 
about one client, the advisers note that their end clients ‘usually want to hide 
their money from ex-wives and the taxman’. And so it goes on. There are also 
countless reports in which they freely admit that the European interest income 
tax introduced in 2005 will boost business with this or that client. The tax is only 
applicable to accounts held by EU citizens, not to accounts held by Panamanian 
companies. The introduction of the tax functioned as a kind of turbo boost for 
business at companies like Mossack Fonseca. The share of accounts held 
through offshore companies rose by ten percentage points in Switzerland alone. 
The number of private individuals registered as account holders sank 
accordingly. There is reason to suspect that many people established shell 
companies so that their accounts were no longer held in their name, but in the 
name of a company whose real owner is very difficult to identify if any 
questions are asked. 

In Mossfon memos from recent years we also regularly come across slightly 
despondent notes regarding certain banks that no longer administer hidden 
accounts and that are therefore unlikely to require Mossack Fonseca’s services. 

In many cases, we have seen how Mossfon is just as unlikely to refuse banks, 
many of whom hardly bother to conceal their roles as accessories, as they are the 
end clients. Instead, Mossfon staff members are all too often happy to assist in 
word and deed. They explain which tax haven would be best for various 
purposes, what kind of business construct offers optimum protection, and they 
repeatedly swear that the real owner’s highly sensitive data is in good hands with 
them at Mossfon. One Mossfon client adviser reassures a Swiss client who is 
worried about the security of his data after the Offshore Secrets revelations by 
informing him that Mossfon uses a ‘state-of-the-art’ data centre and that all 
communication is encrypted to ‘the highest possible security standards’. 
Mossfon also promises other clients that all the sensitive data held at Mossack 
Fonseca is safe and that it will never leave Panama.‘ 

But exactly that has now happened. And we, the journalists, are not the only 
ones who have data. According to information we have received, the German tax 
authorities recently paid €1 million for documents concerning about 600 
Mossack Fonseca companies thought to be owned by German citizens. In the 
spring of 2015, investigators not only searched offices belonging to suspected 


enablers and accomplices such as Commerzbank on the basis of this data, but 
they also — according to our information — carried out raids on about 100 
Mossfon end clients. 

The documents seized by investigators during these raids function as 
counterparts of the entries within the internal Mossfon system — one set reveals 
an intention to evade taxes, the other set proves that taxes were evaded. 

So the proof that Mossack Fonseca enabled German citizens to evade taxes is 
ultimately produced by government authorities. 

Some German banks, among them Commerzbank and HSH Nordbank, have 
already agreed to pay large fines for their dealings with Mossack Fonseca, so 
that legal proceedings against them are closed. Commerzbank paid €17 million 
and HSH Nordbank paid €22 million. These figures consist of financial penalties 
and the return of unlawful profits from illegal business deals. These banks 
would, presumably, not have agreed to pay these sums if they had not helped 
people to evade taxes. 

Incidentally, Commerzbank in particular was initially very wary of working 
with Mossfon. Staff at the bank expressed concern that secret deals could be 
leaked or that nominee directors could disappear with their clients’ money. 
Mossack Fonseca explained the system over and over and finally suggested a 
particularly safe option: bank clients could conceal their money in offshore 
companies under the protective cover of an anonymous trust. This would give 
clients ‘the advantage, when asked by the German tax authorities, of being able 
to truthfully answer no to the questions listed above regarding the account 
holder, beneficial owner and authorization’. In plain English, it means clients 
would be able to inform the tax office that they do not own the account and that 
they have no access to it. This is because the account belongs pro forma to the 
company, and the company belongs pro forma to the trust — which, in turn, 
appoints the client as a beneficiary. 

This tip came, according to a letter we have in our possession, directly ‘from 
our senior partner, Mr Jiirgen Mossack’ — Mossfon’s German director.? Over the 
past few years, Mossack Fonseca has attracted the attention of public prosecutors 
time and again in relation to investigations involving companies set up by 
Mossfon. In April 2008, for example, a slightly panic-stricken employee at the 
Mossfon branch in the Seychelles sends an email to the headquarters in Panama. 
She says that the attorney general of the Seychelles has just informed her that 
investigations are under way against four companies administered by Mossfon, 
and that this was now the sixth case in just a month. The woman is clearly afraid 


of ‘what might happen if the cases go to court’, and asks whether ‘there is a kind 
of exclusion of liability that prevents Mossack employees from being 
investigated’. 

We have not actually seen any cases in which Mossfon is investigated as an 
accomplice. Ultimately, public prosecutors have invariably concentrated their 
energies on the principal offenders, i.e. the individuals or organizations who 
approach Mossfon seeking assistance to conceal their money. 

Until now. 

According to information we have received, the German tax authorities are 
now conducting an investigation into those responsible at the Mossack Fonseca 
law firm, on suspicion of facilitating tax evasion — and Jiirgen Mossack is among 
those under investigation. 

It seems the investigators are querying whether employees of the Panamanian 
law firm knew more than they would have those on the outside believe. 

Unlike the investigators, we are no longer asking that question. We know they 
did. 

And so Mossack Fonseca’s central line of defence collapses. 

Of course, everyone knows at heart that offshore companies are often 
established for exactly this purpose. But since Mossack Fonseca has decided to 
put on this act, we have to play along and expose the game for what it is. In 
correspondence with us, Mossack Fonseca compared itself to a wholesaler who 
has no idea what the end client does with the goods they sell. But in reality, the 
law firm knows exactly what goes on within a number of these companies. In 
many instances, Mossfon is responsible for the upkeep of the ‘goods’ and even 
for the accounting. In those cases in which Mossfon nominee directors ‘manage’ 
the company, Mossfon is often directly involved in questionable business deals. 

In February 2015 Mossfon informed us that every individual granted authority 
to sign on behalf of a company was first subjected to a ‘World Check’. High-risk 
individuals would either not be accepted as clients at all, or would not be granted 
authority to sign. But we see one case in the data involving a senior South 
American director at a national oil company. Alarm bells ring when the check is 
carried out, and the Mossfon employee informs the oil manager’s lawyer that 
they cannot issue him with the authority to sign for the company. What they 
could do, however, is issue his son with the authorization. . . in which case it 
would be crucial not to mention anywhere that the authorized representative is 
the son of the true owner. 

We know the image of the wholesaler is completely inaccurate yet Mossfon 


continues to try to promote it. It is the method employed by the law firm to 
attempt to distance itself from its ‘ethically challenged’ end clients, as Jiirgen 
Mossack called this kind of clientele in a lobbying letter to the British Virgin 
Islands’ financial regulation authority. He could just as well have written 
‘criminals’. 

It would appear to us that Jürgen Mossack and his partners face ethical 
challenges of their own. 
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A SECRET MEETING WITH ALPINE VIEWS 


We have an odd profession: that’s worth mentioning here. For months on end, 
we’ ve been sitting in front of our mountain of data and have barely told a soul at 
the Stiddeutsche Zeitung about it. So far, that hasn’t been a problem. We don’t 
usually walk around the building telling everyone about our investigations 
anyway. But now, on this Tuesday in September, it starts to get really odd. 
Hundreds of reporters from all over the world have made their way here to find 
out more about Prometheus. This means that our colleagues from the SZ hear us 
speaking English with our colleagues from the BBC in the lifts and see the South 
Korean team filming outside, in front of the high-rise building. Our colleagues 
from the SZ stand behind Ritu Sarin from the Indian Express at the turnstile in 
the entrance hall and sit down beside Florian Klenk, our Austrian colleague from 
Falter, who some know personally and many know by sight, in the sunshine in 
front of the SZ Tower’s cafe. In short, it’s obvious we have visitors. Even the 
Guardian’s new Editor-in-Chief Katharine Viner has come here to find out 
about our project. 

So what do we tell our colleagues when they stop us in the lift, cafe or foyer to 
ask us what’s going on today? 

Er, well. Some kind of meeting? A type of conference? 

We worm our way out of the conversations and feel awkward about it. The 
feeling only subsides when we remind ourselves why we’re being so secretive 
and full of our own self-importance: because someone, somewhere in the world, 
is fearing for their life. Our source. 

Nevertheless, word spreads throughout the building about the meeting. We 
bring several colleagues into the loop because they will have important roles to 
play in the project at a later stage, for example the editors from the foreign 
affairs department, with their wealth of knowledge and correspondents all over 
the world. But we can hardly invite anyone to the meetings with our colleagues 
from the ICIJ. We simply don’t have the space. The ICIJ has managed to get 
partner after partner on board; the aim is to have journalists in every country 
we’ve got good hits for, or where we expect to find some. Initially, forty people 


signed up. This figure quickly rose to sixty, then eighty — in the end, 104 
journalists come together for the discussions. 

We’re meeting in the SZ Tower’s Sky Lounge, a room that’s only really meant 
to hold eighty people. But what were we to do? Uninvite colleagues? The room 
is spread over two floors and surrounded only by windows on three sides. From 
here, you can see the mountains in the distance, the city with its towers and 
turrets, and the Allianz Arena, lit up in blue to signal that 1860 Munich are 
playing at home. 

We close the blinds so we can use the projector. While Kurt Kister and 
Wolfgang Krach, our editors-in-chief, welcome the guests, we quickly test the 
WiFi on our phones. It’s working, we can get started. 

The big ICIJ meeting in Munich. Two days of Prometheus. 


[] 


For days now, Hans Leyendecker, our head of department, has been in 
exceptionally high spirits; he’s unashamedly proud of what his ‘young people’ 
are up to. And it’s hardly surprising; it’s not all that often that the Guardian 
editor-in-chief and hundreds of other top journalists call in. But in the past few 
days, we’ve been so busy making sure we’ve got enough bottles of apple juice, 
discussing where the lunches are going to be handed out and organizing another 
projector for the South America working group that we haven’t had the time to 
get excited about it. On top of that, we’ve had to keep adding people to our 
reservation in a Bavarian beer hall in the centre of Munich; we’d promised our 
colleagues that they’d be able to drink beer out of massively oversized glasses 
and that they’d get roast pork and dumplings to go with it. The day before the 
meeting, we got together with the ICIJ team from Washington to discuss the 
agenda for the two days. 

And then the conference kicks off. We talk about the leak (current status: 2.4 
terabytes, 8 million files, 200,000 shell companies) and the findings to date 
(thirty-five links to heads of state), and our colleagues from the ICIJ present the 
specially designed research platforms, for all those who hadn’t been there in 
Washington in July. We’re fascinated to hear about the discoveries made by our 
colleagues who have been working with us on the project for a while and the 
potential repercussions in their countries. Two hundred journalists from more 
than sixty-five countries are now working on the project, and not all of them 
enter all of their hits on the forum. So this is also an opportunity for us to catch 
up on the most recent developments in our investigation. 


Leo Sisti from Italy reports on links with the mafia, Jake Bernstein from the 
ICIJ explains that he has found numerous other world-famous art dealers, and 
Ewald Scharfenberg from Venezuela talks about all the Chavistas he has found 
in the data, referring to socialists and supporters of the recently deceased party 
leader Hugo Chavez. Our Icelandic colleague Johannes Kr. Kristjánsson 
introduces his research findings: in addition to the current prime minister, who 
we had already found at the start of our investigations, Johannes has also 
discovered the owners of one of Iceland’s three failed banks, who have since 
been jailed. And so it continues. In the afternoon, the deputy editor of the 
Guardian, Paul Johnson, puts his thoughts into words we won’t be forgetting in 
a hurry. His newspaper, Johnson explains, has been involved in a number of 
fantastic projects: WikiLeaks, the Snowden Files, Offshore Secrets. ‘But nothing 
of this magnitude. It’s simply incredible.’ 


[] 


Once the major international stories have been presented, the second part of the 
meeting begins: we split off into project groups. Several topic areas — Russia, 
FIFA, the arms trade — are too big for one editorial team to work on alone. To 
some extent, the groups already exist, but it’s easier to exchange information 
when you’re sitting opposite someone in person than by writing encrypted 
emails or posting on the forum. For example, we hear from our two Russian 
colleagues, Roman Anin and Roman Shleynov. A few days ago, they joined our 
small working group on Russia, which, since our meeting in Washington, has 
been digging up anything it could find to do with Russia. And it’s found a fair 
bit. 

First of all, of course, there’s Sergei Roldugin, the cellist and godfather of 
Putin’s daughter, in whose company network we have already found more than 
half a billion dollars. Then there are Putin’s (since sanctioned) judo friends Boris 
and Arkady Rotenberg, as well as Putin’s cousin Igor and one of Russia’s 
richest men: Alisher Usmanov. The oligarch amassed a fortune through raw 
material and media businesses, temporarily owned several per cent of Facebook 
and is still a major shareholder in Arsenal Football Club. Mossfon itself views 
him as a ‘highly risky’ client, but has still decided to hold on to him for the time 
being.2 The list goes on. All of these names are especially interesting because 
they are associates of Putin, who himself has condemned the offshore system as 
‘unpatriotic’. It doesn’t exactly create a good impression, having so many people 
from his entourage appearing to be involved in this unpatriotic offshore world. 


Roman Shleynov tells us about another case that he’s currently researching. It 
involves the company Earliglow Ltd, which was established in the British Virgin 
Islands in 2010. In the company records, Roman discovered an interesting 
document that states that Earliglow is a ‘non-direct shareholder’ of a Russian 
company called Svyazdorinvest. 

Around 2010, Svyazdorinvest was awarded a contract by the Russian state-run 
company Rostec to build a fibre-optic cable between China and Russia. 
Estimated order volume: $550 million. A mega-project. 

Rostec’s director, Sergey Chemezov, is an old friend of Putin’s from the KGB, 
and he too is on EU and US sanctions lists. A graduate of the Russian General 
Staff Academy, he was once stationed with Putin in Dresden, and later became 
one of the Russian head of state’s most important middlemen. He awarded a 
multi-million contract from the state-run company he manages to a company 
owned, in part, by his son. In any case, this is how it appears to us. And it gets 
even better: according to our documents, the daughter of the vice president of 
Rostec holds indirect shares in Svyazdorinvest through Earliglow.2 

It looks as if we have hit upon part of ‘Russia Ltd’, that gigantic self-service 
shop disguised as a democracy that experts have been criticizing for years. 
Karen Dawisha, the author of the recently published Putin’s Kleptocracy, refers 
to it as ‘kleptocratic authoritarianism’. 

Roman Shleynov is telling us about this story in detail for the first time now, 
because neither he nor Roman Anin have had access to the forum so far for their 
own safety. 

After some consideration, we come up with the following solution together 
with the ICIJ: they will both get smartphones here in Germany for use 
specifically in this project. And they will immediately dispose of them if they 
suspect that a Trojan could have been installed on them. Journalists working in 
Russia who publish texts that are critical of Putin regularly report break-ins in 
their offices and homes. It goes without saying that offices and homes are 
bugged. The two Romans won’t be using their new smartphones to make any 
phone calls. 

So we go shopping with them. We drive to a nearby electrical store and pay 
with cash, so that it can’t be traced back to us. 


[] 


During the meeting, we use every opportunity to call for caution. It would only 
take one remark to the wrong person and Prometheus could be exposed. 


Mossack Fonseca would be warned, as would the clients. They would then have 
plenty of time to work out a counter-strategy, and we wouldn’t even be halfway 
through our investigations. The whole project would be in jeopardy. 

That’s the worst-case scenario. 

The best-case scenario is as follows: in spring 2016, hundreds of journalists 
from all over the world go online on the same day, at the same time, with the 
story about the Panamanian law firm Mossack Fonseca, and it’s the first anyone 
has heard about this team investigation. 

In Munich, we spend a long time discussing questions such as the exact 
publication date and the name we should give the project, that is to say which 
catchword we should use for the publications. We don’t manage to answer either 
question definitively. Most people agree that we want to aim for publication on a 
Sunday evening, so we can set it up as a topic for the whole week, and that the 
middle of March or the beginning of April would be a good time. But with 200 
journalists from more than sixty countries, there are lots of limitations. No 
newspapers are published in Russia on 7 or 8 March: Women’s Day. Not an 
option. On 13 March, three state elections are being held in Germany. Not ideal 
at all, as the papers will be full of election results. The Easter holidays fall in the 
week of 20 March, and on 3 April presidential elections are being held in Peru. 

Whew! We postpone the decision. 

The same goes for coming up with a name. Should it be #globalleaks or 
#offshoreuncovered? #panamafiles or #theshellgame? #shadowland or 
#hiddenmoney? We don’t reach a consensus, but end up with twenty new 
suggestions instead. 

The discussions drag on. But that’s the price you have to pay when so many 
colleagues are involved. The mix of TV and newspaper journalists is also an 
issue. The TV people need moving images from Panama, and they want to film 
them as soon as possible, because everything needs to be edited and they’re 
always in such a rush at the end anyway. But we don’t want two dozen TV 
teams turning up at Mossack Fonseca’s offices in the next couple of months and 
filming ‘very inconspicuously’. 


[] 


Rita Vásquez stands up and asks for the floor. She’s the deputy editor-in-chief of 
La Prensa, the Panamanian newspaper that wants to report in Mossfon’s home 
country. Rita, our local partner, says what we’d already been thinking: Panama 
is a small country and the offshore industry is an industry whose representatives 


are always on the lookout for investigative journalists. She believes that if even 
just a small camera team were to turn up and start asking strange questions, it 
wouldn’t just make the people at Mossfon nervous. That’s because everyone 
knows everyone else and the branch is closely connected with politics. Take 
Ramon Fonseca, for example, who is the adviser to the president. She manages 
to convince our TV colleagues. We don’t want to make the industry nervous 
already. 

When Rita Vasquez talks about the offshore industry, we all pay special 
attention. She knows the branch like no one else, not only because she lives in 
Panama, one of the control centres of this industry, but above all because she 
used to be the manager of a Panamanian offshore branch in the British Virgin 
Islands herself. She doesn’t want to talk about her past, but her experience and 
knowledge will help us to better understand Panama. A country that’s the perfect 
location for Mossack Fonseca, despite all the legislative amendments. And, 
incidentally, for a whole host of other law firms that make their money through 
offshore companies. 

It’s not going to be easy to develop an understanding of Panama, or should we 
say: of the part of Panama that helps so many criminals, dictators, corrupt 
companies and tax evaders hide money. Of course, Panama is no longer the 
‘narcokleptocracy’ that US Senator John Kerry, the later presidential candidate, 
called it in 1998, referring to the surprising proportion of the drugs trade that 
was passing through Panama. But still, as the British author Nicholas Shaxson 
quotes a US official saying, ‘The country is filled with dishonest lawyers, 
dishonest bankers, dishonest company formation agents and dishonest 
companies.’ A report published by the US State Department in March 2014 is 
somewhat more objective, but equally harsh. According to this report, Panama is 
still an ‘attractive target for money launderers’ who launder dirty money there 
accumulated through the drugs trade, corruption and tax evasion. ‘Numerous 
factors hinder the fight against money laundering,’ the report continues, 
including ‘the existence of bearer share corporations, a lack of collaboration 
among government agencies’, and ‘a weak judicial system susceptible to 
corruption and favouritism’. Panama also features on the blacklist of tax havens 
published by the EU in June 2015. 


[] 


A few days after our colleagues left, the president of Panama, Juan Carlos 
Varela, announced his arrival in New York. He was set to give a big speech. We 


watch it online: Varela strides up to the lectern in the large hall of the United 
Nations, rustles his papers together and starts talking. Sixteen minutes. It’s 
meant to be an attempt to turn the tide. ‘Panama is committed to expanding its 
international cooperation in the field of fiscal transparency and advancing 
toward the automatic exchange of information on tax matters on a bilateral 
basis,’ Varela says. 

Varela, of all people, whose adviser is the offshore tycoon Ramon Fonseca, 
wants to put an end to the existence of tax havens? That’s how it seems, in any 
case. What else could the automatic exchange of information mean, other than 
putting an end to the tax haven of Panama? 

Are we writing about something that’s no longer going to be current at the 
time of publication? Are we striking out at a country that’s just decided to 
radically reform? Well, on the one hand, our data relates not only to Panama. 
Mossfon manages and/or establishes companies in the British Virgin Islands, the 
Seychelles, Bermuda, Samoa, British Anguilla and the US states of Nevada and 
Wyoming. And on the other hand, there’s the question of just how credible 
Varela’s announcements are. 


[] 


A short time later, we find out that we’re not the only ones to have taken note of 
Varela’s speech. 


[john doe]: I just heard about the President of Panama speaking to the United Nations. Do you think he 
will pull this off and actually open up the country’s data? 

[SZ]: Hard to believe. 

[john doe]: That would be a problem for Mossack Fonseca, right? 

[SZ]: If it would be consistently implemented: yes. 

[john doe]: And Ramón Fonseca is a consultant to Varelas administration. 

[SZ]: Jep. 

[john doe]: So that’s never going to happen. . . 


A couple of days later the source passes us a letter that those responsible at 
Mossack Fonseca sent out to its clients — banks, law firms and asset management 
companies — after Varela’s speech. Obviously based on the assumption that its 
clients were as alarmed by Varela’s speech as we were, albeit for different 
reasons, Mossfon attempts to reassure them. ‘We would like to assure you’, it 
states, that ‘no changes to the existing laws and regulations’ were announced in 
Varela’s speech. 

No changes? Hadn’t Varela promised greater transparency and the automatic 


exchange of information? In some way, yes. But Mossack Fonseca is confident 
that it will all be solved the Panamanian way. A potential ‘exchange will have to 
be designed in such a fashion’, it writes, that ‘it cannot be abused in a way that 
inhibits the competitiveness of some countries at the expense of others’. 

When reading these sentences, you mustn’t forget that Ramon Fonseca is not 
only one of the president’s closest advisers, but also the deputy leader of the 
governing party. Such a person has the president’s attention, and such a person 
could, in case of doubt, also have the influence required to moderate unpopular 
legislation. Of course, only in order to maintain Panama’s competitive position. 

That letter from Mossack Fonseca goes on to say that President Juan Carlos 
Varela will continue to defend ‘the interests of the country’. 

The interests of Panama. We wouldn’t be surprised if these just so happened to 
be congruent with the private interests of cabinet member Ramon Fonseca. And 
in some ways, they are: the more money law firms like Mossfon bring into 
Panama, the better. At least, that had been true until now. 
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SECRET MEETINGS IN THE KOMITEROM 


We’re in Lillehammer, at Lysgardsbakken, the Olympic ski jumping hill. Below 
us lies the mountain valley of Gudbrandsdalen, where Norway’s largest lake, 
Mjøsa, reaches one of its narrowest points. On its shore is Lillehammer, the city 
that hosted the 1994 Winter Olympics, in which German skier Markus Wasmeier 
sensationally won two gold medals. We can see the train tracks winding through 
the valley, the railway station where we arrived a day earlier and the friendly, 
albeit somewhat run-down hotel where we’re staying. 

The Radisson Hotel is built into the hillside a bit higher up. Here, from 8 to 11 
October 2015, about 900 reporters from more than 100 different countries are 
currently meeting for the Global Investigative Journalism Conference. The 
conference takes place every other year and is held somewhere different each 
time. The programme includes workshop reports from prestigious colleagues and 
presentations from data specialists, undercover journalists and experts in press 
law. The conference has nothing to do with our Prometheus project, but some of 
our international partners are there too and we want to use the opportunity to 
speak to them in person. 

Nine hundred investigative journalists. When we say that to friends and 
colleagues, the reaction is always the same: isn’t the risk of an attack really 
high? If you assume that only one in every ten had made serious enemies 
through their work, the police would have ninety potential motives on their 
hands if a bomb were to go off. The conference visitors include many wealth 
reporters like us, who have occasionally been a thorn in the side of the Federal 
Intelligence Service, the US Secret Service, the General German Automobile 
Club (ADAC) or the German government. But many of the other visitors work 
in China, Russia, Ukraine, the Middle East or African states, where they face 
real, tangible threats. Some colleagues only work undercover, others operate 
under false names, or at least use a different name to publish articles. Roman 
Anin, our Russian colleague from the ICIJ with whom we’re working on the 
Putin story, is asked at the podium whether he’s afraid. 

Anin shrugs his shoulders and says, ‘If they want to kill me, they’II kill me.’ 


[] 


For us, the conference isn’t only exciting because the presentations are so 
interesting; it’s also useful for our project. ICIJ Director Gerard Ryle, 
Prometheus project manager Marina Walker, head of data Mar Cabra, 
programmer Rigo Carvajal and everyone else who works at the ICJJ, plus at least 
thirty journalists who are investigating Prometheus with us, are all in 
Lillehammer. By now, there are already more than 100 groups and thousands of 
entries in our forum. But it’s still best to discuss things in person, like here in 
Lillehammer. We keep retreating to hotel rooms or the small Komitérom, which 
is where the heads of the International Olympic Committee gathered in 1994 to 
discuss matters of importance. You could call it the control room of the Olympic 
Games. 

What is less ideal in the matter of secrecy is that some of our colleagues who 
are working with us on the Mossfon data bring up the project in overcrowded 
rooms and start talking about ‘your crazy data’ in front of others. We quickly 
steer the conversation in another direction or stare silently into space until the 
colleague gets the picture. 

In Lillehammer, we show the ICIJ data specialists a new list of around 25,000 
names along with information regarding transfers effected by Mossfon on behalf 
of its clients. Mar Cabra isn’t sure what to make of it. On the one hand: yay, 
more material! On the other hand: there’s already so much data, and everything 
is already so complicated. . . 

We also explain that we ordered another new computer a couple of days before 
leaving for Lillehammer, the third one to date. The second one, our almost 
brand-new €6,000 supercomputer, couldn’t cope with the sheer quantity of data, 
by now around 2.5 terabytes. Working with it had been extremely tedious; each 
individual search took minutes and it took even longer if you wanted to view the 
documents, assuming the computer didn’t crash completely. Even though all the 
experts had told us that this computer would be powerful enough, it wasn’t. 

Of course, when we ordered the second computer, we knew than an even more 
expensive computer would have been even better suited to our needs, let’s say a 
€17,000 computer. That’s how much the version would have cost that the IT 
specialist recommended to us as a silver bullet. Suggesting that seemed no less 
absurd to us than suggesting building a floor on top of the SZ Tower just for us. 

But our project had reached absurd dimensions, and it was simply no use: we 
couldn’t work like that. We reluctantly made our way to the main editorial 
office, cautiously explained the present situation and proposed, somewhat more 


cautiously, that if we wanted to make the data searchable in the Stiddeutsche 
Zeitung, we would need an even more expensive computer. If we wanted to rely 
on the ICIJ, we wouldn’t need it. . . Our new proposal: a mega PC with 128 
gigabytes of RAM and five SSD hard drives with a total of 8.256 terabytes of 
memory. A server farm contained in the housing of a computer. Cost: 
€17,484.36. 

Our chief editors decided: buy it. 

When we tell ICIJ programmer Rigoberto Carvajal about this over dinner in 
Lillehammer, he can’t believe it: ‘€17,000?! For one computer? You’re crazy!’ 
He laughs his head off and at the same time is completely fascinated, wanting to 
know every detail, every specification. We’re almost embarrassed by the new 
computer, so we refer him to Vanessa Wormer, the data journalist who’s been 
working in our small team since September; we recruited her from New York, 
where she’d completed a special course of study in data journalism at Columbia 
University. She writes programs that enable us to search the data more 
effectively, and takes care of the entire technical side of things. Since Vanessa’s 
been working with us, we only concern ourselves with hard disk sizes, RAM or 
Excel formatting if it’s absolutely necessary, and that’s hardly ever the case. And 
that’s very refreshing. Aside from that, Vanessa is a fantastic journalist and 
colleague who brings a great deal to our project. 

Another new colleague has joined us for half a year: the freelance journalist 
Mauritius Much. He not only delves deeply into any case we present him with, 
above all relating to sports, but is also a competent Spanish speaker. This is by 
no means insignificant, as a considerable number of the emails and documents 
are written in Spanish. 

Now there are four of us in the Stiddeutsche Zeitung’s Prometheus team. 


[] 


Ensuring that the translation is spot on becomes increasingly important the 
closer we come to the publication date. Some of the tricks used by Mossfon 
employees only become apparent in the exact translation; for example, one of 
our favourite topics at present: dealing with the nominee beneficial owner. It’s 
by far the most abstruse thing in the world of shell companies, which is not 
exactly lacking in terms of absurdity. 

In the offshore industry, the beneficial owner is incontrovertibly at the end of 
the chain of cover-ups. Front men may well be deployed as directors, and other 
offshore companies may be registered as shareholders, but insofar as the 


beneficial owner, often referred to as the ultimate beneficial owner, is concerned, 
one thing is clear: they are the real owner of the company. These days, any 
relatively serious bank will only set up accounts for an offshore company if their 
ultimate beneficial owner is named. The bank then reviews this individual in 
order to verify who it’s doing business with. The rule of having to name the 
person at the end of the chain is essential in order to prevent money laundering, 
the financing of terrorism and other criminal acts. 

Mossack Fonseca’s employees evidently seem to believe that this is a rule like 
many others. That is to say, another rule that can be applied flexibly. 

Mossack Fonseca therefore repeatedly offers especially problematic clients the 
chance to switch off the banks’ verification mechanism by offering the use of a 
nominee beneficial owner to appear in the place of the real ultimate beneficial 
owner. 

Owner. 

Nominee beneficial owner. 

Real ultimate beneficial owner? 

It sounds farcical. It’s not only completely absurd, but also completely illegal. 
The high-ranking Mossack Fonseca manager Ramses Owens, until a few years 
ago director of the trust department, forms the same judgement when a colleague 
from the Mossfon office in Hong Kong asks him about it in May 2008. Ramses 
Owens tells him that the nominee beneficial owner service is ‘these days’ 
considered ‘illegal’, and goes on to explain how in Panama, an article in the 
criminal code prohibits the use of ‘hidden beneficiaries’ as well as lying about 
‘real ownership’ .+ 

Only a year previously, Ramses Owens himself had offered precisely this 
service to a client, describing it as a ‘delicate’ service that Mossack Fonseca 
would, of course, treat with the ‘utmost confidentiality’. 

And a good six months later, after having described it as illegal, the very same 
Ramses Owens offers this service to another client. In January 2009 a US client 
gets in touch; Mossack Fonseca manages a hidden foreign account for her with 
HSBC. The client is panicky; she fears HSBC knows her name and suspects a 
Mossfon employee might have accidentally passed it on. 

Ramses Owens attempts to pour oil on troubled waters. He writes to tell her 
that Mossfon can resolve the issue, offering her the natural person nominee 
service. He goes on to explain that this involves using someone as the beneficial 
owner, ‘whose name is known to the bank’. However, Ramses Owens describes 
this service as ‘very delicate’, which means that it’s also very expensive. The 


first year costs $30,000 and the second year costs $15,000. After all, it takes a lot 
of organization. ‘We have to appoint the nominee owner, pay him, he has to sign 
a load of documents to cover us, we have to ensure that he can prove that he’s 
capable, in economic terms, of possessing such a large amount of money, we 
need references, proof of residential address, and so on.’ If the client were to 
accept the offer, Ramses Owens writes, she needs to be aware that it’s a long- 
standing contract.2 

We continue with our research and find out that the client accepted the offer. 
She paid around $60,000 for the service over the course of three years. The man 
acting for her as the real owner is like the Porsche among Mossfon’s nominee 
directors. They like to recommend him in ‘delicate’ situations like this. 

His name is Edmund W., and he’s Ramon Fonseca’s ex-father-in-law. 

Mossack Fonseca usually brings Edmund W. into play as a natural person 
nominee, and reference is always made to his favourable attributes: he’s an 
engineer, so he could theoretically have a lot of money, he’s a British citizen 
who’s been living in Panama for a long time and he rarely travels. The 
grandfather of Ramon Fonseca’s children becomes, on paper, the owner of the 
client’s company, and HSBC actually receives his passport and electricity bill 
from Mossfon, as if he were the ultimate owner.? 

All of this is so clearly illegal that any discussion about it is essentially 
ridiculous. We’re interested to know what Mossfon will say about it. 

But Mossfon doesn’t answer our question about whether they offer the natural 
person nominee service. The office sends a general statement, which doesn’t 
relate to our allegation. 

The most recent example of the natural person nominee service dates back to 
March 2014. A Mossfon employee offers this service to a Frenchman for a hefty 
$10,000 per year. The client probes into it, wanting to know if it would be 
possible to open a bank account in which he ‘wouldn’t appear at all’ in the 
documentation. 

Not a problem, the Mossfon employee explains, you could declare someone 
else as the ‘ultimate beneficial owner’. This person’s name would then be passed 
on to the bank, so the bank would carry out the due diligence on them, as the 
‘real owner’ .4 

We also use our time in Lillehammer to ask our partners if they have found 
obvious violations of the law, infringements of due diligence obligations, forgery 
of documents, assistance with money laundering, that type of thing, in the cases 
they are investigating. You can never have enough of those. In the nooks of the 


lobby, in hotel rooms or when taking a walk together, other Prometheus 
investigators tell us similar stories, time and time again. 


[] 


A few days after returning home, the source approaches us with a question that 
makes us nervous. 


[john doe]: Ready for more data? 

[SZ]: Seriously? 

[john doe]: Very serious. 

[SZ]: Okay. How much? 

[john doe]: Less than 100GB this time. But still a lot. 
[SZ]: Wow! It’s crazy. 


Even more data from Mossack Fonseca. We’re already struggling to cope with 
what we’ve got. When we receive it, we put it to one side to start with. Our new 
supercomputer hasn’t arrived yet and there are another few million documents 
from our current database that need to be converted into recognizable text so we 
can search them. 

It’s all too much. 

But we still have a few months until we need to transform our investigations 
into a newspaper article. 
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THE GAS PRINCESS AND THE 
CHOCOLATE KING 


The Cypriot middleman doesn’t beat around the bush: he sends an email at the 
start of August 2014 stating that he wants to set up another offshore company 
with Mossack Fonseca. The shell company is to be called Prime Asset Partners 
Ltd and should be established in the British Virgin Islands. It all seems clear so 
far. 

There’s just one small twist: the middleman explains that the client and future 
shareholder is a ‘person who’s involved in politics’. The company, however, will 
have ‘nothing to do with his political activities’. 

An extremely subtle understatement. 

The Cypriot middleman’s client is Petro Poroshenko, the current president of 
Ukraine, a country at war. 

Poroshenko, number fifty-five on our ever-growing list of links to heads of 
State, is one of the country’s richest men. Depending on which list you consult, 
his fortune puts him in either sixth, seventh or eighth place. 

He is known as the ‘Chocolate King’ because he made his fortune in 
chocolate, and the pralines his company produces are the market leader in 
Eastern Europe. His empire includes various media, car and seed businesses, as 
well as a shipyard. Poroshenko is regarded as a strong-willed and pragmatic 
leader. He has been involved in politics since the late 1990s, when Leonid 
Kuchma was still president. He is one of the founders of the Party of Regions, 
which later, under the leadership of Viktor Yanukovych, became a breeding 
ground for those who robbed the country and its state companies for their own 
benefit. 

However, in 2004 Poroshenko sided with the Orange Revolution. When 
hundreds of thousands of Ukrainians took to the streets to protest against 
Yanukovych’s manipulated victory in the presidential elections, Poroshenko’s 
television station was the only one to report on the demonstrations. In the end, 
the demonstrators prevailed and the run-off elections were repeated; this time the 


winner was Viktor Yushchenko, who had been disfigured as a result of a poison 
attack. He was made president, Yulia Tymoshenko became prime minister and 
Chocolate King Petro Poroshenko became chair of the National Security and 
Defence Council, later serving as foreign minister and the minister of trade and 
economic development. 

One thing that the protesters in Kiev’s Maidan square demanded was that the 
100 richest Ukrainians should no longer be involved in politics. They railed 
against the country’s elite, against people like Yulia Tymoshenko and Petro 
Poroshenko. This is an elite that is immensely rich, while 80 per cent of 
Ukraine’s 48 million residents are living below the poverty line, according to 
Statistics from the United Nations. It was a demand that went unheard. In 2014 
Petro Poroshenko stood for president against Yulia Tymoshenko, among others, 
and won. It seems likely that the promise he made in his election campaign 
played a role here; the oligarch who claims not to be an oligarch promised to sell 
his companies, declaring, ‘As the president of Ukraine I will and want to only 
focus on the wellbeing of the nation.’ 

Big words. He hasn’t stuck to them. 

Over the past few years, Poroshenko has become even richer, while other 
oligarchs in Ukraine have lost huge amounts of money as a result of the crisis. 
Why did he fare so much better? Possibly because, in the summer of 2014, 
Poroshenko was also focusing intensely on his assets. Outside Ukraine, 
undercover. 

Instead of bowing out of the economy, just two months after his election 
success, Poroshenko establishes Prime Asset Partners Ltd in the British Virgin 
Islands via the Cypriot middleman. Later, Poroshenko’s middleman defines the 
company’s objective as a ‘holding for Cypriot and Ukrainian companies of the 
Roshen Group, one of the biggest European producers of confectionery’. The 
Chocolate King’s empire. This was all carried out well out of the public eye. 
And that was how it was meant to stay: the emails mention that communication 
with Mossack Fonseca should take place via a ‘secure email system’. 

It is possible that Poroshenko wanted to group his companies in this offshore 
holding in order to sell them more easily. But it is also possible that he simply 
wanted to conceal the fact that he hadn’t kept his electoral promise.+ 


[] 


In any case, one thing that’s more important to the people of Ukraine than 
whether or not Poroshenko intended to sell his companies is the question of 


morality. The Ukrainian president establishes his shell company in August 2014, 
of all times. This is during the height of the Ukrainian conflict, precisely when — 
from 10 August until 2 September — the Battle of Ilovaisk is raging in the south- 
eastern city, which is home to 15,000 people. For days on end around 7,000 
soldiers, mainly members of the Ukrainian volunteer battalions, are trapped in 
the city, surrounded by pro-Russian troops, supported by Russian forces and 
tanks. The Ukrainian soldiers call for help but their appeals are in vain. The 
army, whose commander-in-chief is Poroshenko, fails to send any support. 

After days of heavy fighting, both sides sign a ceasefire agreement. The 
Ukrainian units are told that they can leave the encircled city unscathed as long 
as they leave behind their weapons. When the Ukrainian soldiers pull out, they 
are suddenly shot at from tanks and mortars and up to 1,000 soldiers are killed. 
The Ukrainian government speaks of a ‘massacre’. 

And what does President Poroshenko do, after his promise to ‘only focus on 
the wellbeing of the nation’? He registers a shell company. 

While Ukrainian soldiers are losing their lives and the world is looking on at 
the conflict, Mossack Fonseca and Poroshenko’s agent are discussing the details 
of the holding. Poroshenko finds his electricity bill and has it verified, his 
passport is certified and a director is chosen. Just one day before the end of the 
Battle of Ilovaisk on 2 September 2014, all the necessary formalities are 
completed. 

It wouldn’t be too presumptuous to assume that Poroshenko’s offshore 
dealings will make the headlines in Ukraine. This is a country that stood out in 
the data; we find more high-ranking politicians from Ukraine, riddled with 
corruption and mismanagement, than virtually any other country. Aside from 
Poroshenko, the current president, we have also found links to two former prime 
ministers: Pavel Lazarenko is listed as the sole owner of an offshore company, 
and Yulia Tymoshenko is involved indirectly, via a company she was allegedly 
involved with. 

It was Lazarenko who sent a fax to Mossfon in April 2005 claiming he’d just 
found out a few weeks previously that he owned Gateway Marketing Inc., a shell 
company that had been established by Mossack Fonseca. We also discover that 
the mayor of Odessa, Gennadiy Trukhanov, is the shareholder of a company 
registered in the British Virgin Islands. Furthermore, we find the son of the 
former prime minister Mykola Azarov and the family of a former member of 
parliament who was an assistant to overthrown President Yanukovych, 
temporarily sanctioned by both Switzerland and the EU.2 


[] 


A current head of state and two former heads of government from a single 
country? We hesitate again for a moment: shouldn’t this be making the headlines 
straight away? A while later, as we’re sitting in front of the mass of documents 
relating to our hits in Ukraine, our thoughts instead turn to the question: will we 
be able to finish our investigations by spring, in time for the publication date we 
agreed on at the meeting in Munich? 

For weeks, we have been torn in these two opposite directions. We can hardly 
wait for everything to finally be published. And at the same time, we could 
urgently do with more time. A lot more time. There’s so much to investigate, so 
much to write. So many loose ends, so many unanswered questions, so many 
topics still left that we ought to, have to, and want to investigate in detail. 

But there’s only one solution: patience. 

We don’t know exactly how long we’ll have to stay patient for. Since we 
decided to publish everything at the same time as our international partners in 
spring 2016, dozens of strong stories have come to the fore, resulting in more 
work than anticipated. What’s more, we have fallen behind our deadlines in all 
technical areas; we haven’t yet converted all our locally stored data into 
searchable text, even though a good 100,000 files are processed every week. The 
update that we received from our source in Lillehammer hasn’t even been 
indexed yet. 

Still, the decision about the project’s name has since been made; this question 
had been unanswered since the meeting in Munich. It’s going to be called the 
Panama Papers. 

The hashtag on Twitter will be #panamapapers. 

ICIJ Director Gerard Ryle came up with the suggestion. It’s an allusion to the 
Pentagon Papers, the US Ministry of Defence’s secret papers, published by the 
New York Times in 1971. The Pentagon Papers proved that US Presidents Harry 
S. Truman and Richard Nixon had lied about the Vietnam War. Thanks to the 
newspaper’s revelations, the Americans found out that the Vietnam War, 
contrary to the claims made by Nixon and Truman, had been planned for a long 
time. Their claim that war had been intended as a way to save democracy in 
South Vietnam was revealed to be a pretext. 

One of this project’s many peculiarities is that the data includes someone who 
was also mixed up in the Watergate scandal. According to a witness, Gilbert 
Straub provided $50,000 to ensure the Watergate burglars remained silent. And 
according to the documentation, Mossfon did business with the Panamanian firm 


belonging to the very same Gilbert Straub in the 1980s. 

Pentagon Papers. 

Panama Papers. 

It takes a bit of getting used to, but it works. Or have we long since lost the 
ability to see our monster project in any kind of objective way? In any case, it’s 
devouring us: the online presence, logo, images, graphics, the eight-page special 
supplement in the print version of the SZ on the first and second days of 
publication, how the subsequent series of reports is going to pan out. We present 
our project to other teams at the Süddeutsche Zeitung, have frequent meetings 
with the legal department, transatlantic teleconferences with the ICIJ and 
meetings with our colleagues based abroad. And then there’s our actual work, 
which involves investigating our cases, going through the many thousands of 
hits on our search lists according to relevance, checking documents, arranging 
meetings, posting in the international forum and catching up on the most recent 
cases that have been shared there. 

Every single day we are thankful that the German team not only comprises us 
at the SZ, but also our colleagues from NRD and WDR. 

And then there’s this book, which is hard to juggle around our family lives. 
Our current division of work is as follows: for the first shift, one of us starts 
writing in the evening, after putting his children to bed. The other gets up at four 
in the morning and takes over until someone toddles in from his kids’ bedroom 
just before seven. We can’t keep this up in the long run, that much is clear to us. 
But the end is now in sight, so we put our lives on hold for a while, until we’ve 
worked through this mountain of data. 

And at the same time, of course, the project is still a huge gift. 


[] 


When we take another look into the background of Pavel Lazarenko’s curious 
company, which he apparently didn’t realize existed for many years, it strikes us 
that this wasn’t his only offshore company. His name also comes up in 
connection with a company called Bainfield, in which he held shares. However, 
Lazarenko’s most interesting company is Bassington Ltd. It appears Yulia 
Tymoshenko was also involved with Bassington Ltd. and, at the same time, was 
involved in a massive case of suspected corruption and embezzlement. 

Yulia Tymoshenko’s rise to power starts in Dnipropetrovsk, a city in the south 
east of Ukraine that is evidently a type of biotope for political leaders. Leonid 
Brezhnev, the former leader of the USSR, Leonid Kuchma, the former Ukrainian 


prime minister and president, and Pavel Lazarenko were all born there. Local 
people speak of the ‘Dnipropetrovsk mafia’ and not just because of the 
concentration of big politicians the city has given birth to. 

In this unpronounceable city, Tymoshenko lays the foundations for her later 
wealth, at a time when the end of ‘actually existing socialism’ is almost within 
reach. She makes money by renting out pirated copies of American films: 
Rambo, Pretty Woman, and allegedly pornographic films too. She soon earns her 
first million by doing so, according to reports. When the Soviet Union finally 
collapses, Tymoshenko, who according to the Spiegel is ‘obsessed with money 
and power’, goes into the oil business and in 1995 becomes the president of the 
company United Energy Systems of Ukraine. The young woman who grew up in 
a prefabricated apartment building makes a fortune. By the end of 1996 she’s 
already controlling a large part of Ukraine’s national economy. The Wall Street 
Journal reports that in the same financial year, her energy consortium paid just 
$11,000 in taxes. When questioned about this, a spokesperson for Tymoshenko 
said that this was ‘untrue and not supported by any evidence’. 

During that period, Yulia Tymoshenko is detained more than once. In 1995, 
for example, she gets held at Zaporizhia Airport with a large amount of cash on 
her; she has to spend several days in prison before being released. In 2001 she is 
imprisoned for forty-two days for gas smuggling and tax evasion. She is 
suspected of fraudulent conduct relating to the importation of gas from Russia 
during her time as president of United Energy Systems of Ukraine, but the case 
never reaches trial. In relation to this, Tymoshenko’s spokesperson claimed that 
the governments of Leonid Kuchma and Viktor Yanukovych had attempted to 
‘politically and physically annihilate Yulia Tymoshenko’. For this reason, 
Ukrainian law enforcement authorities ‘fabricated false criminal proceedings, the 
aim of which was to politically discredit Yulia Tymoshenko and to physically 
isolate her by illegally detaining and arresting her’. 

At this time, the Mossack Fonseca company Bassington Ltd has already been 
active for quite some time. This is the company that investigators report 
Tymoshenko as having been involved with alongside her mentor Pavel 
Lazarenko. Lazarenko already has his best political period behind him; he’d 
been prime minister of Ukraine from 1996 to 1997, until he eventually stepped 
down, swept up in rumours of corruption. In 1998 he’s detained when trying to 
enter Switzerland on allegations of money laundering. What’s more, he allegedly 
embezzled several million dollars of state funds during his time as prime 
minister. He’s let off with a warning and quickly leaves the country, only to be 


detained upon entering the US just a year later. He has to stand trial at a jury 
court in San Francisco. In the bill of indictment, Lazarenko, together with 
multiple accomplices, is accused of having siphoned off hundreds of millions of 
dollars ‘through fraud, blackmail, bribery and embezzlement’. The US 
investigators name Yulia Tymoshenko as a ‘not charged accomplice’. 

This is by no means detrimental to her political success: with her hair dyed 
blonde and braided into a neat crown, she first becomes the heroine of the 
Orange Revolution in 2004, Ukraine’s Joan of Arc, and then prime minister. 
Once from January until September 2005, and then again from December 2007 
until March 2010. 

Pavel Lazarenko sits in a US prison cell, while Yulia Tymoshenko rules 
Ukraine. In 2004 he’s found guilty of money laundering and fraud. He is 
accused of smuggling $114 million, originating from corrupt sources, into the 
US. The judgment doesn’t mention Tymoshenko. Some information about her 
possible involvement has come to light in another lawsuit that has been ongoing 
in the US since 2011, and at the same time about the role of Bassington Ltd, the 
company that was founded by Mossack Fonseca in 1996. A company from 
Massachusetts instituted proceedings against Bassington at the competent 
District Court in 2011, because the shell company owed it $18 million from a 
previous transaction with a company owned by Yulia Tymoshenko. The action 
states that Bassington was the parent company of Tymoshenko’s United Energy 
Systems of Ukraine. It claims that Tymoshenko had bribed Lazarenko in 
connection with Bassington; she’d paid him half the revenue made from the 
illegal activities as a kickback. Bassington had been ‘a central element’ in 
concealing Tymoshenko’s company’s assets and in ‘concealing bribes paid to 
Lazarenko’. Ultimately, the district court ruled that Bassington owed the 
complainant $18.3 million. The court didn’t elaborate on the accusation of 
bribery. When questioned, one of Yulia Tymoshenko’s defence lawyers claimed 
that Tymoshenko and United Energy Systems of Ukraine had ‘never had any 
relations’ with Bassington Ltd. Furthermore, ‘Neither Ms Tymoshenko nor the 
companies associated with her [. . .] had transferred any illegal money to Pavel 
Lazarenko or the companies associated with him.’ 

And with that, we’re caught up in the battle of propaganda about the 
prerogative of interpretation of Yulia Tymoshenko. She divides opinion more 
than virtually any other Ukrainian politician; some view her as the Ukrainian 
angel while others view her as a criminal oligarch. 

After losing the presidential elections to Yanukovych in 2010, she was 


accused of having abused her position. Again, this related to transactions 
involving gas. A court in Kiev determined that in 2009, while she was prime 
minister, she negotiated a gas agreement with Putin, who’d inflicted serious 
economic damage on the country. She was sentenced to seven years’ 
imprisonment. Her opponents celebrated the judgment as belated justice, 
whereas her supporters regard it as an act of revenge by an unjust regime. 

From the outside, it’s hard to judge the extent to which the stories put forward 
by either side are propaganda. However, it is clear that Ukraine has a huge 
problem when it comes to its politicians: a problem that is, in part, reflected in 
Mossack Fonseca’s client lists. 


[] 


Incidentally, Mossack Fonseca’s employees are aware that one of their clients is 
the current president of Ukraine. After all, the Cypriot middleman sent an email 
explaining that his client was ‘involved in politics’, and standard checks by 
Mossfon employees confirmed the client was the Ukrainian president. According 
to protocol, they request an explanation regarding the purpose of the company. 
Mossfon’s advisers also demand further evidence regarding the source of the 
money and several other documents from Poroshenko’s middleman. In the end, 
they get a type of clearance certificate for Poroshenko, issued by International 
Invest Bank. It states that Poroshenko has always kept his account ‘properly and 
to our satisfaction’. 

A more detailed look at this document reveals its background: Petro 
Poroshenko is a co-owner of International Invest Bank; he submitted a clearance 
certificate issued by his own bank. 
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A RAID BY THE VIKINGS OF FINANCE 


‘Today’s the day,’ ICIJ head of data Mar Cabra posts on our joint research 
forum on 29 October 2015: all the data that ICIJ has uploaded to its servers, 
everything we have received at that point, is now searchable. 8.2 million 
documents. Well over 2 terabytes. 

Happy fishing, everyone. 

At long last all the journalists are able to search all of the data rather than just 
part of it. By now, ‘all the journalists’ means more than 320 colleagues from 
over seventy countries and ninety media organizations. It is the largest 
journalistic collaboration in history. 

Immediately all hell breaks loose on the forum. New hits are posted with each 
passing minute: a world-famous film director, a chess grand master and several 
ex-Formula 1 racing drivers. Just a few hours later our Swiss colleague Titus 
Plattner posts enthusiastically on the forum: ‘What a difference! We originally 
found about 300 Swiss citizens in the data, but now we are up to more than 
1,000 — many of them of great interest! The whole Swiss team is thrilled.’ 

And so are we. 

The impact of having searchable data is greatest in relation to a country that 
was already prominently represented by its prime minister: Iceland. Our 
colleague Jóhannes Kr. Kristjánsson is working with us there on the research, 
and the next day he writes: ‘I have been drinking coffee all night — to enable me 
to search.’ He adds: ‘In just twenty minutes I made some great finds in the data: 
Bjarni Benediktsson, finance minister and chairman of the Independence Party, 
Ólöf Nordal, newly elected vice-chair of the Independence Party.’: 

What you need to know here is that the Independence Party is in government 
in Iceland and the vice-chair is simultaneously the serving interior minister. Her 
party is in coalition with the Progressive Party — whose party secretary also 
features in the data, as does the party leader — none other than the prime 
minister. 

What a country. What an absurd state of affairs. 


[] 


In Reykjavik we meet our colleague Jóhannes Kristjánsson, arguably Iceland’s 
best-known investigative journalist, with the most accolades to his name. He 
used to work in public radio in Iceland, and produced remarkable material on the 
causes of the banking crisis in his country. He has also conducted undercover 
research into drug abuse and exposed sex offenders. He is currently working as a 
freelance journalist, focusing entirely on the Prometheus project. His story is 
bound to capture the attention of the masses in this country, whose political 
landscape was shattered by the banking crisis of 2008. 

Prime Minister Sigmundur Gunnlaugsson, you will recall, cropped up early on 
in our investigations. If you remember, he and his wife, through the intermediary 
of the Luxembourg branch of Landsbanki, set up a company with Mossfon in the 
British Virgin Islands: Wintris Inc. They opened an account in its name with 
Credit Suisse in London. The only hitch with this: since the beginning of 2009 
there has been a law in place in Iceland that requires parliamentarians to disclose 
their corporate shareholdings and assets. So Gunnlaugsson, who has been a 
member of parliament since April 2009, should have declared Wintris Inc., but 
failed to do so. At the end of 2009 he then ‘sold’ his stake to his wife: for one 
dollar. 

Just to recap: Iceland’s prime minister features in the data, along with two of 
his ministers. That’s a third of Iceland’s cabinet. On top of that there are high- 
ranking officials of both governing parties, dozens of well-known business 
figures, and what feels like half of the country, says Johannes, who can hardly 
get his head around it all. 


[] 


As we take the long drive from the airport to the capital, Jóhannes explains to us 
how the revelations came at a significant time for the country. Here on this 
volcanic island in the Atlantic, it is the families who called the shots centuries 
ago, when the country earned its living from fishing and nothing else, who still 
pull the strings even today. The Icelanders have a name for this clique: ‘The 
Octopus’, because its members reached their tentacles into all sorts of places. 
Into the banks, the big corporations, the political parties. At the end of the 1990s 
this powerful elite effectively privatized the entire country. First the fishing 
fleets, then the banks. Iceland became one of the richest countries in the world. 
In Reykjavik, designer boutiques flourished, fancy restaurants were pricier than 
in London, and there were luxury 4x4s parked on every corner. According to a 


2006 study, the 320,000 Icelanders were the happiest people in the world. ‘Then 
came the wake-up call,’ says Johannes. 

For there were some less savoury aspects to the boom and privatization: the 
country’s three largest banks — Kaupthing, Glitnir and Landsbanki — had been 
sold off to the ‘octopuses’ and their friends. Progressive Party supporters took 
over Kaupthing, while Landsbanki was handed over to the grandees of the 
Independence Party, and Glitnir Bank was sold to a big retail chain mogul. 
Government and parliament took steps to relax the rules on mortgage lending, 
and suddenly you could take out property loans much more easily. A huge 
bubble developed. 

When, in 2008, the signs started to suggest that this phase would not go on 
indefinitely, and it looked as if the big banks could be derailed, the octopuses 
went even further: they manipulated the banks’ share prices. The principle was 
as simple as it was disastrous: the banks granted loans to shareholders who in 
turn used these loans to purchase shares in the same banks, which then caused an 
artificial hike in the share price. The result was that the book value of the top 
three banks grew to eight times the size of Iceland’s GDP. Eight times! 

It was the beginning of the end. In September 2008, in the wake of the 
financial markets crash triggered by the Lehman Brothers declaring bankruptcy, 
the banks were no longer able to repay their creditors and collapsed. The state 
had to stump up so much money in bailouts that Iceland itself faced insolvency. 
The people ran riot. A former state secretary for finance was later sentenced to 
several years in prison, as were the three former owners of Kaupthing - Olafur 
Ólafsson, Hreiðar Már Sigurðsson and Sigurður Einarsson. 

Jóhannes laughs. ‘I came across all the Kaupthing people in your documents as 
well, but they’re already locked up in prison.’ 

An unscrupulous elite had ruined one of the richest countries in the world in 
the space of just a few years — that is how most people here see it. And while 
ordinary Icelanders suffered as the cost of living went up, wages went down and 
mortgage debt soared, many of those who had brought about the crisis had long 
since moved their money out of the country. 

‘Financial Vikings’ is the name the Icelanders still use for those risk-takers 
who, in their greed for ever more money, both miscalculated and enriched 
themselves at the same time. The Vikings were aided in this by the government 
at the time, which is still in power today, consisting of the Independence Party 
and the Progressive Party. Gunnlaugsson’s party of progress. 


[] 


Wintris, the former offshore company of Prime Minister Sigmundur 
Gunnlaugsson, opened its account with the London branch of the Swiss bank 
Credit Suisse prior to the crisis, in March 2008 — in other words, at a time when 
it must have long been apparent to the financial Vikings with their inside view 
where Iceland was heading: into insolvency. 

When we realized this, we went over every single document again. We talked 
to J6hannes. We talked to experts. The big question was — and is: for what 
purpose did Iceland’s prime minister need a company in the British Virgin 
Islands and an account with a Swiss bank? And above all: why didn’t he 
properly declare them both? 

Jóhannes found the answer: Wintris appears on the list of creditors of 
Kaupthing and Landsbanki. He later heard from a source that Wintris had also 
held Glitnir bonds. After the bank crash Wintris was owed the equivalent of 
several million euros for its Landsbanki and Kaupthing bonds alone.? 

Either Gunnlaugsson and his wife bought the bonds of the three banks before 
the crisis hit, in which case he should have declared this publicly when he 
entered parliament in 2009.4 

Or Gunnlaugsson — a graduate economist who spent time at Oxford University 
— and his wife bought the bonds after the collapse of the three banks, when they 
were worth only 3 to 5 per cent of their original value. That would mean they 
had speculated that bank prices would go up again before long. 

Neither of the two possibilities casts Gunnlaugsson in a particularly good light. 
Especially as the fact he owned these bonds suddenly puts a whole new 
complexion on his political activity up to that point. 

At this point there’s something you need to know: when senior figures at 
Landsbanki realized that they were running out of money, they came up with a 
ruse to get hold of foreign currency. They set up an online subsidiary of 
Landsbanki, which they called Icesave. The subsidiary offered much higher 
interest rates than was the norm at the time, attracting savers from all over 
Europe, particularly the United Kingdom and the Netherlands, but also 
Germany. When Landsbanki went bankrupt, the hundreds of thousands of savers 
wanted their money back. But as Landsbanki had long ago run out of money, 
there were calls in Europe for the central bank, and hence every citizen of 
Iceland, to act as guarantor. The United Kingdom even used counter-terrorism 
legislation to freeze the assets of Landsbanki, the Central Bank of Iceland and 
the government. Iceland, everybody’s darling until only recently, was placed on 
an equal footing with Al-Qaeda. 


The centre-left coalition that took over the reins of power in 2009 in the 
aftermath of the crisis and attempted to bring order to the chaos left behind by its 
predecessors, the Independence Party and the Progressive Party, was 
understandably panic-stricken. The new government negotiated with the Dutch 
and the British and a proposal was eventually agreed on: Iceland would be 
granted new loans, and in return Dutch and British Icesave customers would get 
their savings back — guaranteed by the Icelandic government. This, it was hoped, 
would enable Iceland to rescue its reputation and avoid ruining its chances of EU 
accession. 

But these plans met with opposition. The Icelanders — through their taxes — 
would have had to act as guarantors for the misadventures of the financial elite 
and would have been paying off the new loans for years to come. A political 
clash ensued. At this point a hitherto completely unknown grouping appeared on 
the scene and entered the political fray. It called itself ‘InDefence’ (short for ‘In 
Defence of Iceland’), collected signatures online of those opposed to the planned 
deal and sent experts into parliament to speak out against the compromise. 
InDefence was composed of a mix of regular citizens — one of its leaders still 
works as a piano teacher today — and senior politicians. 

One of its foremost speakers was none other than Sigmundur Gunnlaugsson, 
the newly elected chairman of the Progressive Party. The man who at the time 
was co-owner of the offshore company Wintris, and hence one of the creditors 
intent on getting their millions back from the banks. 

However, according to sources in Iceland, he kept that nugget of information 
to himself, not even telling his fellow InDefence members.° 

Three referendums were eventually held, and on each occasion the InDefence 
camp won. The government’s proposed compromise was dropped from the 
agenda. This public victory marked the start of an ascent that took Gunnlaugsson 
all the way to the prime minister’s office. 

InDefence also proposed that all creditors should pay the government a 39 per 
cent stability tax if they wanted to withdraw their funds, which had been frozen 
by the government since 2008. In 2015, though, Gunnlaugsson’s government 
agreed a different deal with the creditors, involving the payment of a ‘stability 
contribution’ which experts say will reduce the amount of money going into the 
state coffers by more than €2 billion. Even the fury of his former InDefence 
colleagues wasn’t enough to change Gunnlaugsson’s mind. 

They won’t be pleased to hear that the deal is extremely advantageous for the 
family of the premier: the approximately €2 billion that the government now 


loses out on goes to the creditors instead. And one of those creditors is the 
offshore company Wintris. 

So in a way Gunnlaugsson was sitting on both sides of the negotiating table. A 
classic conflict of interest, which it wouldn’t have been a bad idea to disclose. 


[] 


In summer 2015 Gunnlaugsson saw Iceland’s tax authorities confronted with an 
interesting decision: an anonymous whistle-blower had offered Iceland’s 
authorities a tax CD. The CD held secret data relating to shell companies owned 
by a number of Icelanders. Data which, according to our information, all came 
from Mossack Fonseca — though it was apparently much older and less detailed 
than the data in our possession. 

The offer was made public, and there was a nationwide debate over whether or 
not the authorities should buy the data. What the Icelanders didn’t know was 
that, according to our sources, the company that the prime minister had bought 
with his wife also featured on that CD. The head of the tax authority was in 
favour of buying the data. She had high hopes: after all, the CD was said to 
contain documents relating to between 300 and 500 shell companies owned by 
Icelanders. Iceland’s finance minister Bjarni Benediktsson — a member of one of 
the infamous Octopus families — was initially sceptical. He argued that ‘giving 
an anonymous person a suitcase of money’ for the data was ‘completely 
unthinkable’. 

But that is precisely what the head of the tax authority decided to do. The data 
was bought for the equivalent of around €200,000. And in a TV interview on the 
subject, asked whether he had held assets in tax havens or conducted 
transactions via tax havens at any time, the finance minister declared: ‘No, I 
have never held assets in a tax haven or anything like that.’ 

When we go through this case with Johannes in Reykjavik, he points to his 
laptop: ‘I’ve got the sentence on there, and I am going to have it scrolling right 
across the screen when we publish the story.’ 

On that night in October when Johannes sat drinking coffee after coffee while 
trawling through the cache of data that was finally fully searchable, Bjarni 
Benediktsson was one of the first names he entered. He found him. In 2006 the 
finance minister, along with two other business executives, was given power of 
attorney for the company Falson & Co. in the Seychelles — and an email from his 
bank adviser to Mossack Fonseca stated that the real owners were ‘the same 
three names mentioned above’ .® 


According to our information, this firm, too, was on the CD purchased by the 
Icelandic authorities. 

Is this the reason why Bjarni Benediktsson was initially sceptical about 
purchasing the data?2 

Benediktsson is going to have to account for himself when Johannes publishes 
his stories in Iceland, if not before. Under the accepted rules of politics, as 
finance minister, no less, it will be hard for him to hold on to his position. This 
may also be the case for Ólöf Nordal, the serving interior minister, who 
according to Jóhannes had power of attorney for a company named Dooley 
Securities S.A.8 


[] 


The Panama Papers will place the government under extreme pressure to explain 
itself. “The people of Iceland have gone through so much since the bank crisis 
that now they will have zero sympathy with an extremely rich prime minister 
and his extremely rich wife, who used an offshore company to secretly buy bank 
bonds,’ Jóhannes explains. 

He is in an absurd situation: he has the material that may force the prime 
minister of his country to step down, he has the story of the year ready and 
waiting, and has had since spring 2015 — yet he still has to wait, and keep on 
waiting, until we are all ready to publish in spring 2016. 

What’s more, he knows that a small chunk of data is already out there, in the 
hands of the revenue authorities. And Iceland is a very small country where 
everyone knows pretty much everyone else. 

‘I ask myself nearly every day: will the story keep?’ he says. 

A whole other problem for Johannes is that he has no idea where and how he 
will even be able to publish the story. He is a television journalist, and Iceland 
has three main television channels. But he has found senior figures from all three 
broadcasters and/or shareholders and/or close relatives of these in the data. 

Jóhannes is uncomfortable about offering his story to one of the three 
broadcasters. Paradoxically, with each of his finds the scoop gets bigger — but so 
do his concerns about publication. 

The newspapers are still an option, of course. It’s just that DV, the tabloid 
known for its daring investigative stories, has just been taken over by a former 
politician from the Progressive Party — who would then have to publish reports 
about his friends. And the editor-in-chief of the leading daily newspaper, 
Morgunblaðið, is the former head of the central bank, Davið Oddsson, in other 


words one of the figures jointly responsible for the economic crisis. 

Jóhannes is now considering simply publishing his research on a dedicated 
website. He has already acquired the name Reykjavik Media, and the web 
address Rme.is. 

He laughs. ‘But the name hardly matters. Everyone in Iceland will go on that 
website if we publish our stories there. Everyone will want to read it.’ 

And not just in Iceland. 
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UNITED BY MARRIAGE, UNITED BY 
MONEY 


There are not many photos showing Vladimir Putin with his family around him. 
The private life of the president is taboo in Russia. He keeps his two daughters 
firmly out of the public eye. So we were amazed when, in the course of our 
Internet research, we stumbled across a rather pixelated black and white photo 
showing a young, serious-looking Vladimir Putin. The snapshot was taken in 
1985 in Leningrad, as St Petersburg was known during the Soviet era. Mikhail 
Gorbachev had just become general secretary and Vladimir Putin was still a 
minor, insignificant KGB officer. In the photo, he holds his baby daughter Maria 
in his arms, and standing next to him is his ex-wife Lyudmila; she has threaded 
her arm through his and looks happy. 

Next to Lyudmila stands a young man with longish hair and a steady gaze. It is 
Sergei Roldugin, the godfather of Putin’s daughter Maria. The mysterious cellist. 
During our research we found him to be at the centre of a web of anonymous 
offshore companies — but only once we had managed to peel away the various 
concealing layers in which Mossack Fonseca and the Swiss law firm we 
mentioned had shrouded it. Over the years, around $2 billion was channelled via 
this network with the aid of several banks, including some in the West, and quite 
a number of shell companies in Panama and the British Virgin Islands. 

But Roldugin had told the New York Times that he didn’t have millions to his 
name, that he was just a musician. Only a few months after this claim was made 
in an article on the strikingly rapid increase in the wealth of Putin’s friends, 
several million was transferred to a Roldugin company account at the Swiss 
branch of a sanctioned Russian bank. Roldugin — and this is the curious thing 
about the story — is virtually unheard of in Russia. He is known mainly from 
films or biographies about the life of Vladimir Putin in which he is portrayed as 
a kind of sidekick, ‘Putin’s best friend’, and makes admiring comments about 
the head of state. 


[] 


Putin and Roldugin met in the 1970s when they were both young men. Putin was 
like a brother to him, Roldugin later says in an interview. At night they would 
cruise the streets of St Petersburg, singing and getting into fistfights with other 
hooligans. Roldugin is also said to have introduced Putin to his wife-to-be, 
Lyudmila. 

The bond between the two men evidently endures to this day, even though 
their paths in life could not have been more different. Shortly after the 
christening of his daughter Maria, Putin was posted to East Germany, and while 
there his second daughter Katerina was born. He only returned to St Petersburg 
after the fall of the Soviet Union. The KGB man became the mayor’s assistant, 
then his deputy, before being appointed head of the domestic secret service, the 
FSB, then prime minister. In 2000 Putin became president. Sixteen years on he is 
more powerful than ever. 

Roldugin was the principal cellist at the Mariinsky Theatre and rector of the St 
Petersburg Conservatory. As a musician he has won numerous accolades, and it 
is said he often plays at private soirées at Putin’s house. He is also one of the 
very few people who can get away with divulging private insights to journalists. 
For example, Roldugin was able to disclose with impunity something that was 
not public knowledge up to that point: that the Russian president, who always 
likes to project the image of an eternally youthful muscle-man, has been a 
grandfather for a long time now and suffers from back trouble. 

Godfather, long-standing friend, matchmaker, key source for the Putin 
biography, an insider on private matters and so on and so forth. All this suggests 
that Sergei Roldugin, if not the ‘best friend’, is at the very least a very important 
and trusted associate of the Russian president. 

Now, it’s fair to say that if Putin has really accumulated such fabulous riches 
as experts believe, he won’t have put his name on them. The money would 
officially belong to people who don’t come under public scrutiny, inconspicuous 
middlemen whom he nevertheless trusts implicitly. 

People like Sergei Roldugin? 


[] 


The cellist, who had not replied to our enquiries by the time we went to press, 
popped up in our data in connection with five offshore companies: Roldugin 
was, at least for a time, the owner of the three shell companies International 
Media Overseas, Raytar and Sonnette — and these in turn have close links to the 
two companies Sunbarn and, most notably, Sandalwood Continental Ltd, which 


plays a particularly mysterious role within the network. 

For Mossack Fonseca, the official contact for these firms was the Swiss law 
firm that we have already mentioned, and which also failed to respond to our 
enquiry. The law firm seems to act as a kind of gatekeeper to the Roldugin 
network. It may be the official contact for Mossack Fonseca, but individual 
offshore company documents reveal that, behind the scenes, it is Rossiya Bank 
employees who really pull the strings. Bank employee S. was authorized to sign 
documents for Roldugin’s company International Media Overseas, and others 
had similar powers for other firms in the network. Rossiya Bank is based in St 
Petersburg and was founded with Communist Party money at about the time 
Putin returned to the city from his posting to East Germany. Experts regard it as 
‘Putin’s bank’ and several of Putin’s close friends own shares, including 
Roldugin. During the crisis in Ukraine, the US government placed the bank on 
its sanctions list in an attempt to penalize Putin’s inner circle. He reacted 
promptly, ordering the state bank to support Rossiya Bank, and several state 
energy companies placed their money there. 


[] 


So we see that this Rossiya Bank is tied up in the same network as Roldugin’s 
companies. 

Rossiya Bank’s role in the Roldugin network is apparent from an exchange of 
emails in 2009. A lawyer at Mossack Fonseca harboured concerns and decided 
to consult Jürgen Mossack and the Swiss partner Christoph Zollinger. A Rossiya 
Bank employee had told her that he wanted Mossfon to approve a $103 million 
credit line for the offshore company Sandalwood. The money was to come from 
a bank in Cyprus. We look at the attached forty-seven-page agreement, and the 
page that is meant to show details of the collateral is blank. That strikes us as 
extremely unusual for a transaction of this magnitude. 

It was an agreement that must have looked suspicious even to Jürgen Mossack. 
It is probably money of dubious origin and equally dubious purpose, he writes in 
an internal email. It’s a ‘delicate’ situation, he says. 

A remarkable comment. 

Despite Mossack’s concerns the deal was not rejected.+ Instead, Mossfon 
asked for a ‘letter of indemnity’ to be issued, an exemption from liability. If 
there turned out to be problems with the agreement, the client would be held 
responsible in the first instance, and not the offshore law firm. The $103 million 
credit line is one of many questionable transactions that have come to light in the 


Roldugin network. Money from Russian oligarchs evidently flowed into the 
network of shell companies as well. In 2013 alone, several shell companies 
linked to the brothers Boris and Arkady Rotenberg extended loans of around 
$200 million to an offshore company in the Roldugin network — and it is not 
apparent from the documents whether they were ever repaid. Shortly prior to 
that, one of Arkady Rotenberg’s companies had been awarded the contract for 
the South Stream pipeline project, an undertaking worth billions, but which was 
suspended during the Ukrainian crisis. The Rotenbergs did not respond to our 
request for comment. 

According to the data, around $1 billion was funnelled into the Roldugin 
network between 2009 and 2011 alone. A large portion of this evidently came 
from the Russian Commercial Bank (RCB) in Cyprus, at the time a wholly 
owned subsidiary of VTB Bank, which is largely in Russian state ownership. 
Where RCB got these sums of money from is not explained in our files. When 
we enquired, the bank said it could not comment on clients or transactions, but 
that it obeyed the law. 

An industry insider told our colleagues at the Guardian that Putin and his inner 
circle apparently used RCB, at least during the 2000s, as a kind of personal 
credit card. The bank contests this, but according to the source, ‘When one of 
Putin’s favoured few or his wife needed money, whether for a shopping trip, a 
yacht or some other investment, RCB always stumped up the funds for them 
without question [. . .] RCB was a self-service store for the power elite.’ This 
may explain why, during the euro crisis in 2013, the Russian government was so 
fiercely opposed to a ‘haircut’. The plan was to use this approach to trim all 
deposits with Cypriot banks, including RCB. ‘We were given to understand in 
no uncertain terms by those in the very highest positions of power in Russia that 
if we touched RCB the reaction would be unlike anything we had ever seen 
before,’ the head of Cyprus’s centrist party said later in a radio interview. RCB 
was largely exempted from the measure. 

Experts who have reviewed the dubious loans found in the data see the unusual 
terms — with some loans, for example, there was virtually no interest to pay, or 
no sign of any repayment, or no requirement to furnish collateral — as a strong 
indicator that these were cash gifts rather than loans. ‘It would appear that tax 
evasion, fraud and/or some other predicate act is underlying these transactions 
for purposes of money laundering,’ says David Weber, a financial expert at the 
University of Maryland. 

At the same time, the enormous loans are just one of the ways in which the 


offshore companies in Roldugin’s network obtained money. Between May and 
June 2010, for example, the company Sunbarn receives payments running into 
millions for ‘consulting services’. Sunbarn apparently advised another offshore 
company on ‘investment and trade’ in Russia, for which it was paid $30 million. 
There is much to suggest that what is going on here is an attempt to disguise 
flows of money intended for a completely different purpose. According to our 
research, the offshore company that paid for the advice was never known as an 
‘investor and trader’ in Russia. 

Money laundering experts view the term ‘consulting services’ as an easy 
smokescreen for massive movements of money. 

Another pattern came to light early on in our research, which we called 
‘claiming failure fees’. It is extremely simple and at the same time an ideal way 
of shunting money from one place to another: one of the offshore companies in 
the network undertakes to buy corporate shares from another offshore company 
in Belize. However, the company ‘fails’ in its commitment to provide these 
shares — and has to pay almost $800,000 in ‘compensation’. So there is a clear 
‘business transaction’ and the transfer can be neatly labelled. 

Roldugin’s company International Media Overseas signs a particularly 
lucrative deal in February 2011: all rights to a $200 million loan are made over 
to it — for the price of one dollar. According to the agreement, which is among 
the Mossfon documents, the loan generates interest payments of $21,917 a day, 
which adds up to $8 million a year. 

We also come across suspicious backdated equity transactions in this 
connection: according to these documents, companies from the Roldugin 
network buy shares in Russian companies for millions of dollars, which are then 
sold on again almost immediately — at a substantial profit. The people who stand 
to profit from these sales may be brilliant speculators. However, certain factors 
stand out that make us doubt this is the case. One example: on 5 June 2011 a 
Rossiya Bank employee asks Mossfon to ask the directors of Sandalwood to 
approve several share transactions. A normal procedure in itself: behind-the- 
scenes staff getting directors to sign contracts. But what’s different in this case is 
that, according to the attached documents, the transactions appear to have 
already taken place five months previously, in January 2011. 


[] 


The dubious loans running into millions, the backdated share transactions, the 
consulting fees and compensation; all seem to be part of a colossal shadow 


system. A system in which vast amounts of money can be passed to opaque 
offshore companies in only a short space of time. 

More often than not it is the Russian state that is the loser. 

Now it’s not really a good idea to milk the Russian state. Unless you happen to 
be one of those people who, thanks to their contacts, can get away with it. 

Experts have long spoken of a kleptocracy when they talk about Russia under 
Putin. Indeed, Vladimir Putin’s political ascent has been accompanied by 
massive corruption allegations from the outset, most of them since forgotten. 

But now we see how, with the help of an old friend and close associate of 
Putin, hundreds of millions find their way, by devious routes, into an offshore 
pot of money. 

To enable us to get a better understanding of the deals we have unearthed, we 
talk to a European investigator, one of the world’s best-known trackers of money 
launderers and fraudsters. ‘There are hundreds of ways of getting money out of a 
country like Russia,’ he says, and the routes we had uncovered were among 
them. He says there is no way the Russian authorities were unaware of what was 
going on. In Russia the task of combatting money laundering is handled, he says, 
by an authority known as Rosfinmonitoring. Since its inception the authority has 
been headed by a Putin confidant and, unlike most other European authorities, 
operates more like a secret service than a police service. Rosfinmonitoring can 
read emails, tap phone conversations and access all of a person’s bank details. 
‘Nothing escapes them,’ the investigator adds with a combination of respect and 
envy. 


[] 


The small taskforce of Prometheus researchers covering Russia, which was set 
up at our meeting in Washington, is now having encrypted discussions almost 
daily about their research findings, puzzling loans, suspicious contracts and the 
latest projections of the amount of money siphoned off. 

Our colleague Luke Harding from the Guardian puts it this way: we are on a 
quest for the ‘Holy Grail of investigative journalism’ — Putin’s money. Things 
could quickly get dangerous for our Russian colleagues Roman Anin and Roman 
Shleynov in particular. In Russia it is often said that working as a journalist there 
is tantamount to suicide. 

So if you are following the trail of Putin’s money, what then? 

We therefore decide together with ICIJ Project Manager Marina Walker to 
hold a work meeting on neutral ground, far from the Russian secret service. We 


want to talk to our Russian colleagues about what we have found so far and how 
we should proceed, without the fear of eavesdroppers. 


[] 


So, shortly before Christmas 2015 we travel to London. Our meeting place: 
Kings Place, 90 York Way, head office of the Guardian. We are meeting on one 
of the upper floors, where, at the end of a long corridor, there is a room that 
holds legendary status among investigative journalists: ‘the bunker’. 

The bare room, which can only be opened with one key and a special key card, 
is where the Guardian once analysed the secret documents leaked by the NSA 
whistle-blower Edward Snowden. Now there are up to ten editors here working 
on the Mossfon data that arrived at our offices in Munich several months 
previously. 

The desks are tightly packed, the window to the corridor is obscured and the 
findings to date are all on Post-it notes on the walls, carefully sorted by category: 
celebrities, mercenaries, heads of state, sportspeople, politicians. When the 
Snowden documents were examined here, they even had two guards outside the 
door. That time word had already got out that the data was at the Guardian. We 
hope that’s not the case this time. 


[] 


The group assembled in the bunker is a small one: besides us there is our 
Russian colleague Roman Anin, plus Luke Harding, who was once expelled 
from Russia for speculating about Putin’s fortune in an article. Marina Walker, 
Gerard Ryle and Jake Bernstein from the ICIJ have made the journey, and we 
are also joined by BBC journalists and our colleagues Julia Stein from NDR and 
Petra Blum from WDR, who has been working her way through the Roldugin 
data for months. 

Together we discuss what we have already found to date in the files: the 
brothers Arkady and Boris Rotenberg, for example.? Or the Russian oligarch and 
friend of Putin, Gennady Timchenko, who crops up in the data as a shareholder 
or authorized signatory of several shell companies.2 

We also have a chuckle about Dmitry Peskov, Vladimir Putin’s spokesman. 
Peskov recently came under fire because at his wedding to a well-known skier 
he wore a watch worth far more than he earns in a year. Then on top of that 
bloggers revealed that Peskov and his new bride spent a holiday on one of the 
world’s most expensive sailing yachts. And now what do we see in the data? 


That until 2014 at least, his wife was the owner of a shell company named 
Carina Global Assets. In all, our data reveals connections to four Russian 
ministers and senior officials, four members of parliament and two governors. 
The son of Minister of Economic Development Alexey Ulyukaev, for example, 
was director of the offshore company Ronnieville Ltd. The nephew of Nikolai 
Patrushev, the former director of the secret service and current secretary of the 
powerful Security Council, crops up as a shareholder, on and off, in a company 
incorporated in the British Virgin Islands. Meanwhile, Deputy Interior Minister 
Alexander Makhonov appears to have controlled a whole network of shell 
companies via the shell company Nortwest Management. 

They are all good stories, but it is the case of the cellist Roldugin that interests 
us most. We discover that he owned shares in Video International through 
offshore companies. Other companies managed by the same people at Rossiya 
Bank — in which Roldugin is a shareholder — and at the Swiss law firm who 
manage Roldugin’s companies, hold and trade share options in the car 
manufacturer Lada and the truck and armoured vehicle manufacturer KamAZ. 
These share options leave a bitter aftertaste: it was mostly trucks from this 
manufacturer that were deployed in the war in Ukraine. The white Russian 
trucks that drove into eastern Ukraine, purportedly carrying relief supplies, were 
KamAZ trucks. KamAZ trucks were also spotted in Syria, where Russian ground 
troops have long been supporting the army of dictator Bashar al-Assad. Lada is 
also a supplier to the Russian army. 


[] 


So there we all sit on a grey December day in the bunker at the Guardian 
discussing the ownership of Russian banks, talking about those who are still 
close to Putin and those who have long since distanced themselves, when Roman 
Anin suddenly stuns us with one of his research findings. 

In a positive way, that is. 

Everyone jumps up and applauds. We shake our heads in disbelief. 

What has happened? 

Shortly before, Reuters news agency had revealed that, in February 2013, 
unnoticed by the media, Putin’s younger daughter Katerina had married a man in 
his mid-thirties named Kirill Shamalov. He is the son of Nikolai Shamalov, who 
is in turn a member of the legendary Ozero cooperative. Vladimir Putin had 
founded the cooperative in the 1990s with a number of friends who had recently 
acquired dachas on the banks of Lake Komsomolskoye, not far from St 


Petersburg. What began as simply an association of dacha owners soon evolved 
into a byword for cronyism. Ozero member Yury Kovalchuk, for example, is 
today the director and largest shareholder of Rossiya Bank, in which Nikolai 
Shamalov — whose son married Putin’s daughter — also holds shares. 

Putin’s son-in-law became an even richer man within just a few months of the 
wedding, bumping up his stake in the petrochemicals giant SIBUR from just a 
few per cent to 21 per cent. 

Even more interesting for us, though, is the location of the wedding: the Igora 
ski resort, an hour’s drive north of St Petersburg, not far from the Ozero 
cooperative. Locals refer to the ‘president’s villa’ as a lavish property and report 
that he often spends time here — although a different owner is entered in the land 
register. It is situated right next to the Igora resort. 

In February 2013 the prominent newlyweds drove up here in a sleigh drawn by 
three white horses. Their guests received gifts of scarves embroidered with the 
letters K&K, the initials of the bride and groom, Katerina and Kirill. 

Photography was banned and all guests had to hand over their mobile phones 
at the entrance. A massive security operation was in place. ‘There were security 
guards on every comer. They wouldn’t let anyone get close to the festivities,’ 
was how an Igora resort employee described the scene to a Reuters journalist. 
There was plenty on offer for the wedding guests: ice skating, a laser show and a 
replica Russian village complete with actors and various kinds of folk dancing. 

Now Roman Anin checked who the Igora resort currently belongs to. The 
owner of the site is a Russian firm called Ozon LLC, which was originally 
majority-owned by an impenetrable Cypriot offshore company and — via another 
intermediate company — 25 per cent owned by Putin confidant Yury Kovalchuk 
and his son. The company purchased the site around 2012. Kovalchuk is one of 
the members of the Ozero cooperative — so the resort that is part-owned by 
Kovalchuk is the venue for the wedding of the children of two other Ozero 
members: the daughter of Vladimir Putin and the son of Nikolai Shamalov. We 
just mention this to highlight the close ties between the members of the posse 
even today, nineteen years after Ozero was founded. 

But it was for another reason that we in the ‘bunker’ at the Guardian were so 
pleased. We have long been familiar with the name Ozon LLC from our 
documents. At the end of 2009 Ozon LLC received a loan of around $5 million 
from Sandalwood, one of the offshore companies in the Roldugin network. 
Approximately two years later it received another loan for almost the same 
amount. According to our files the money was never repaid, and in 2013 


Sandalwood was wound up. 

Millions, apparently diverted and disguised via a shell company from the 
network, seem to have flowed via the offshore company that owned it into the 
resort where Putin’s daughter got married, which is part-owned by one of Putin’s 
friends in the cooperative. The whole operation was orchestrated by Rossiya 
Bank, which is owned by several Putin cronies. And it seems the front man for 
this network was Putin’s best friend: Rossiya Bank co-owner Sergei Roldugin, 
godfather to Putin’s other daughter. 

So our months of research, starting out in Panama, end up leading us to Igora. 
To Vladimir Putin’s closest family. 

Incredible. 
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STAR, STAR, MEGA STAR 


After the meeting in London it gets quieter on the forum and at our offices. Not 
much happens over Christmas and New Year, although we can’t switch off 
completely. Obviously not, after all these new findings. But the unaccustomed 
peace and quiet gives us a chance to cast our eye over some of the old stories 
again. At this point we have well over 7,000 entries on the forum. Far too many 
to keep track of. 

And although it may seem like it in this book, Mossack Fonseca’s clients are 
not all shady characters. They also include famous directors and actresses, South 
American singers worshipped like gods in their own country, brilliant chess 
players and a whole string of owners and chairmen of top-flight football clubs. 

Over the peaceful holiday period we click through hundreds of finds and read 
about dozens of ministers, famous dancers and the granddaughter of one of the 
best-known artists of classical modernism, about spies who had done arms deals 
with East Germany, and about the alleged lover of a European king. 

There are still so many stories we could tell. 

For legal reasons, however, we can only mention by name those we have 
researched in sufficient depth. And the number of these cases is limited by our 
time and energy — after all, sometimes we have to sleep too. 


[] 


It’s the beginning of January 2016 and the Christmas holidays are barely over 
when the next really big case turns up. 

Lionel Messi. The best footballer in the world. Maybe the best of all time. 

The name of his Panamanian shell company sounds a little showy, but not 
entirely unfitting: Mega Star Enterprises. The company is run by five unknown 
nominee directors, but one of the names that crops up in the paperwork belongs 
to the megastar of world football. His name appears in a document dating from 
June 2013 discovered by a Spanish colleague working on the Prometheus 
project. 


In this document, an employee of a Uruguayan law firm notifies the offshore 
provider Mossack Fonseca that the ultimate beneficiaries of Mega Star 
Enterprises are Lionel Andrés Messi and his father, Jorge Horacio Messi. 

That’s all he needs. Lionel Messi is already facing questions over the way he 
has handled his finances. In October 2015 a Spanish examining magistrate 
decided that Messi and his father, who advises him, would be charged with tax 
evasion. The attorney’s office is calling for a fine of €4.1 million, which is 
unlikely to be of great consequence to the multi-millionaire Lionel Messi. But 
above all it’s calling for a nearly two-year jail sentence for the Barcelona 
playmaker. The start date for the trial has already been set for 31 May 2016. 

It will be interesting to see how the Spanish authorities react to this new 
information. Mega Star Enterprises doesn’t appear in the files already held by 
the state attorney’s office, a spokesman for the authority confirms upon request. 
But it could fit the picture, because in the indictment Messi and his father are 
accused of having used shell companies, including for the alleged tax fraud 
involved in this case. 

According to the indictment, Messi and his father used shell companies for the 
purposes of the tax fraud they have been charged with. From 2005, the Messis 
are said to have sold image rights, for very small sums, to offshore companies 
headquartered in Latin American tax havens such as Belize and Uruguay. As a 
result, advertising revenues of €10.1 million are said to have poured into these 
tax havens practically untaxed. What’s more, the Messis are said to have 
withheld important information from the tax authorities to make sure they would 
not find out about the money channelled abroad. This allegedly enabled Messi to 
evade taxes of around €4.1 million between 2007 and 2009. 

Mega Star Enterprises is incorporated on 8 February 2012 by an offshore 
provider in Panama, and the shares are issued as anonymous bearer shares. 
Agents of the abovementioned Uruguayan law firm act on Messi’s behalf. Here 
is the first link to the charges in the indictment: according to these, nine days 
later the same law firm issues confirmation that Lionel Messi is the sole owner 
of the shell company Jenbril S.A. — which is at the centre of the existing tax 
evasion allegations. So Mega Star and Jenbril, which is mentioned in the 
indictment, are looked after behind the scenes by the same Uruguayan law firm. 

The second point of connection emerges in summer 2013, when the 
investigations into Messi are made public. On 12 June 2013 the Spanish news 
agency EFE reports on the proceedings for the first time, and the international 
media follow suit. The very next day, Lionel Messi’s Uruguayan lawyers send 


an email to Mossack Fonseca saying they want to change the offshore provider 
for Mega Star Enterprises; according to the email, this move has already been 
discussed on the phone. In future Mossack Fonseca is to manage the shell 
company. 

Mossack Fonseca insists that it be issued with a letter of indemnity, under 
which Mossack Fonseca and the nominee directors it uses shall be compensated 
for any ‘complaints, claims, actions, disputes, lawsuits, costs and expenses’ 
related to Mega Star Enterprises. The document, which we have among our files, 
is dated 23 July 2013 and bears signatures in the names of Lionel Andrés Messi 
and Jorge Horacio Messi. 

It is hard to say from the documents what role Mega Star played in the tangled 
web of companies owned by the Messis. In one document the general business 
purpose is given simply as ‘Investments’. But so far no specific contracts or 
deals have been found among the leaked data. That, however, may be because 
the Messis seem to have had powers of attorney issued in relation to this 
company for themselves and other people involved — which would mean no 
documents whatsoever would need to go to Mossack Fonseca to be signed. At 
any rate, in a letter dated 23 June 2013, ‘Horacio Jorge and Lionel Andrés 
Messi’ assure Mossack Fonseca that, in the event of the termination of the 
business relationship with the Uruguayan law firm, they will help ‘to revoke 
each and every one of the powers of attorney which the company has assigned to 
third parties’. 

Anyone armed with one of these powers of attorney can sign contracts of any 
kind. They could open accounts, for example, or purchase real estate. Yet from 
the outside it is impossible to find out who actually owns the company since, as 
we mentioned, the shares are held anonymously. 

The Spanish state attorney’s office may well be very interested in finding out 
who was granted these powers of attorney — and for what purpose. 

But whatever is written in the contracts of Mega Star Enterprises, Lionel Messi 
will hardly have to change his existing line of defence in the proceedings. The 
strategy of the FC Barcelona striker is clear — and similar to that of Franz 
Beckenbauer in the affair involving the German Football Association: ‘I don’t 
look at what I sign,’ Messi told the examining magistrate, according to 
newspaper reports. ‘If my father says I should sign, I do it with my eyes closed.’ 
He also said: ‘I sign what my father says I should sign. I don’t look at it. I don’t 
focus on it. I don’t ask any questions.’ 

However, the strategy doesn’t seem to have had the desired effect. The 


Spanish public prosecutor’s office does believe that the initiative came from 
Messi’s father — and the latter is willing to take all the blame — but the Ministry 
of Finance nevertheless decided that Lionel Messi himself should also be 
charged. Even the professional footballer must have found the transactions 
suspicious, argued the ministry spokesperson, for example when he received tax 
refunds for the years 2007 to 2009. According to the news agency AFP, the 
Statement of reasons for the decision cites ‘sufficient evidence to suggest that 
criminal actions were committed by both of the defendants’. 


[] 


We see from our data that Mega Star Enterprises undergoes a change of 
ownership on 1 December 2015. The bearer shares originally issued are 
superseded by ordinary shares, which are held by Lionel Messi’s father. But the 
Uruguayan law firm has one more request in this regard: an agent asks Mossfon 
the next day to confirm that the shareholders of the companies it manages do not 
appear in the Panamanian public register of companies. If, says the agent, this 
happens as standard, could Mossfon please provide the lawyers with the 
necessary documents to prevent it. 

At the time of going to press, Lionel Messi and Horacio Messi had not 
responded to the repeated joint enquiries of the ICIJ and the Stiddeutsche 
Zeitung.t At the time of going to press, the Spanish trial had also not been 
concluded. 
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THE 99 PER CENT AND THE FUTURE OF 
TAX HAVENS 


The more than 2.6 terabytes of data from the servers of the Panamanian law firm 
Mossack Fonseca provide an insight into the offshore world that is more 
detailed, immediate and up to date than anyone could have previously imagined. 
Over the course of many months we have seen with our own eyes how Mossack 
Fonseca has a tailor-made solution for virtually anyone with something to hide. 
The right loophole can always be found in one or other of the tax havens: if the 
company in the Seychelles can’t do it, then the Panamanian trust or the 
foundation in Bermuda probably can — or alternatively a combination of two, 
three or four of these elements. In our globalized world it seems there is hardly a 
single law that cannot be circumvented or have its impact lessened with the help 
of a few shell companies. 

The British author Nicholas Shaxson sums this up rather neatly: ‘Offshore is 
not only a place, an idea, a way of doing things, and a weapon of the financial 
industry. It is also a process: a race to the bottom to where the rules, laws and 
outward signs of democracy are worn away little by little.’ Used systematically, 
offshore offers an opportunity for an almost complete abdication of 
responsibility. It is very nearly impossible, we keep hearing in background 
discussions, for authorities to establish a chain of proof that holds up in court if 
the investigators come up against a network of shell companies strung out across 
five, ten or thirty tax havens. 

This game of hide-and-seek has serious consequences, not only in cases where 
criminal activities are obviously being concealed. The legal constructs of the 
offshore world also create problems on a huge scale. In fact, an expert from the 
Tax Justice Network wrote in 2008 in a memorandum for the UK House of 
Commons Treasury Committee: ‘Within the financial sector it would have been 
impossible for the current credit crunch to have happened if offshore had not 
existed.’ 

Not surprisingly, it was those who had caused the financial crisis who were the 


least affected by it. While billions were spent bailing out banks, and nearly all 
those responsible got away without being investigated, let alone charged, the 
victims, the people conned into taking out enormous loans, were abandoned 
often without a job, a house or any prospect of ever being able to live debt-free 
again. Those who had squirrelled their money away in an offshore trust, on the 
other hand, had no need to worry. 


[] 


There is another aspect that barely gets a mention in this book: the tax methods 
employed by multinational corporations like Amazon, Starbucks and Apple. 
Their boundless efforts, even now, to minimize their tax bills, are crucially 
dependent on offshore companies. The result of these manoeuvres is that the 
countries in which the companies operate and earn money and the people who 
live there lose out on billions in tax receipts — as became apparent from the 
recent Luxembourg Tax Files. Although President of the European Commission 
Jean-Claude Juncker, for years Luxembourg’s prime minister, defends the 
country’s actions as legal, an investigation found otherwise: the European 
Commission took the view that Luxembourg had granted the online bookseller 
Amazon illegal tax benefits. However, Mossack Fonseca does not tend to have 
links to the big corporations, which is why this topic is barely touched on here. 

It’s plain to see that a shocking number of players from the financial world are 
avoiding the scrutiny of the regulatory bodies in their countries with the help of 
shell companies. By doing this they are undermining democratic principles; 
when a society’s rules, agreed on and supported by all, do not apply to those 
whose power and wealth allow them to circumvent them, they lose their 
meaning. 

Why, then, should the others continue to accept these rules? 

Why should the 99 per cent accept that their governments now have no more 
than a theoretical influence on the super-rich 1 per cent of society? An employee 
looking at his payslip sees what the state has taken from him and is powerless to 
do anything about it. But someone who has his dividends paid to a shell 
company in the British Virgin Islands can decide for himself whether or not to 
declare these earnings in the country in which he lives, whose amenities and 
protection he enjoys. 

The feeling that, in the world of finance, ‘the people at the top? can do 
whatever they want is more than just a feeling. 

It’s the reality. 


The Danish sociologist Brooke Harrington, who trained for two years as an 
asset manager and immersed herself in this world, rightly warns of a ‘neo-feudal 
concentration of wealth’. A small group of rich people, she says, are not only 
hiding their money and avoiding taxes, they are also evading the law. 

The members of the international financial elite are effectively constructing 
their own legal system. If something isn’t possible in one country, they simply 
do it in another jurisdiction. And Harrington sees offshore providers, companies 
like Mossack Fonseca, as playing a vital role as helpers and facilitators in this. 


[] 


The international world of finance is just one of the countless beneficiaries of the 
offshore industry. The financial industry does at least try to make sure its 
activities are carried out within the letter of the law, and is partly successful in 
this. But we, along with some 400 international colleagues, also came across 
countless criminals engaging in offshore activities. The Japanese mafia, the 
Italian mafia, the Russian mafia, drugs cartels, arms smugglers, people who 
finance terrorism. The suspected helpers of butchers like Assad and Gaddafi. 
Money laundering rings. As well as corruption cases by the dozen. 

In short: the world of organized crime in all its many forms makes use of the 
offshore industry just as much as fraudsters and criminals acting individually, 
using it to erase its tracks and conceal its crimes. 

That, too, is the reality. 

The good news is that this reality is not irreversible. 

The irresponsibility witnessed in the offshore centres of this world is the result 
of laws that can be changed. 

The experts we met are largely in agreement in their assessment of the 
measures required. There are essentially two main requirements. 

The first big step would be to introduce an effective system for the automatic 
global exchange of information about bank accounts. The British authorities 
would then automatically know about any accounts held by British citizens in, 
say, the Bahamas. This kind of exchange of information is still useless, though, 
if an account is held by an anonymous shell company. For if a UK citizen hides 
behind a shell company and holds the account in the company’s name, then the 
UK authorities will never find out. 

So what is needed, for numerous other reasons as well, is a globally 
transparent register of companies. It would have to list the real owners of 
companies and foundations — and providing false information would have to be 


made a criminal act punishable with tough sentences. That would be the second 
step. 

That’s how easy it would be to put an end to the tax havens. 

It would mean that many of the services offered by Mossack Fonseca for the 
purpose of concealing the real owners of companies sold by the firm would be 
banned, including nominee shareholders, anonymous bearer shares and of course 
the hired ‘real owners’ who are in actual fact only front men. Nominee directors 
would be superfluous because the owners of companies would be known 
anyway. 

Law firms such as Mossack Fonseca like to claim that only a small fraction of 
their clients harbour illegal intentions. It would be extremely interesting to see 
how many offshore companies would remain in business if the names of their 
owners were made public. 

It is simply a matter of systematically implementing these two measures. 

We hear again and again from the defenders of tax havens (mostly they cite 
something they call ‘tax competition’) that these reforms could never be 
implemented in practice. Certainly, this raises the question: why should the tax 
havens give in? 

In fact the French author Gabriel Zucman, in his book The Hidden Wealth of 
Nations: The Scourge of Tax Havens, has worked through how the automatic 
exchange of information and the register of real owners could be implemented, 
using sanctions and enforcement if necessary. 

Zucman argues that even countries like Luxembourg and Switzerland would 
change their mind the moment they found themselves facing drastic measures 
such as a trade boycott. For smaller countries even the threat of sanctions would 
likely be enough, and, if not, a series of small interim steps leading eventually to 
a trade boycott would encourage them in the right direction. ‘No country can 
take a stand against the combined will of the United States and the big countries 
of the European Union,’ writes Zucman. 


[] 


In some cases the lobbyists for the tax dodgers and evaders hide their true 
intentions behind a veil of concern that some of the territories that are well 
known in this connection — the British Virgin Islands, Samoa, the Cook Islands — 
would have no future aside from their existence as a tax haven. 

John Christensen from the Tax Justice Network, who himself comes from the 
tax haven of Jersey, is sick of that argument. ‘We have a romanticized view of 


islands,’ he says. ‘Here, not far from London, some years ago a huge steel plant 
was closed down. A whole town was out of work. In that case anyone can 
answer with neoliberal detachment, “These things happen, that’s the way of the 
market”. Now just imagine for a moment that this town happened to be the only 
town on an island — would that make it worse?’ He smiles. ‘Or let’s put it 
another way: if the inhabitants of one of these islands made their living from 
robbing cruise ships, would we still have sympathy then? Probably not. But 
these islands have been helping to rob whole societies for years! Perhaps we 
simply have to say: nowadays it is feasible to leave an island. And some islands 
have so little to offer that makes life there bearable that it is best to leave them 
uninhabited.’ 

Other objections to automatic data matching and transparent registers of the 
real owners of companies include the argument that the intrusion into people’s 
private affairs would be huge. Really? These registers would record the names of 
the owners, their date of birth, a business address and the number of shares they 
hold. That’s all that is needed. And if that’s too much for some — well, no one is 
forcing them to use an offshore company. 

Note, too, that tax secrecy is not in itself a universal human right. In parts of 
Scandinavia, such as Norway, tax records have been public for years. In Sweden 
there is not only a securities register listing the owners of all shares and bonds, 
but also, upwards of a certain income level, alphabetical lists of these wealthy 
citizens stating their salary, investment income and assets. Yet Swedes and 
Norwegians are not reputed to be envious people. 

Anyone who argues against the register on the basis of the cost, amount of 
work and bureaucracy it would involve should be reminded of the billions that 
States are denied each year as a result of tax havens. The current situation is 
costing society incomparably more. 

And anyone who argues these moves could expose the owners to public 
accusations has failed to understand that this is precisely about doing away with 
organized irresponsibility. The fear that mismanagement, unethical or illegal 
conduct could then be associated with actual individuals is not a legitimate 
excuse for companies to keep their true owners secret. 

The other objection we hear is that tyrannical regimes could use information 
from these registers to pursue their adversaries. That is true in theory. But firstly 
this presents an almost naive view of tyrannical regimes like Syria, as those in 
power there know very well who their political enemies are and where they keep 
their money. And secondly, in the data from our leak, as well as the data from 


Offshore Secrets and the HSBC Files, it’s extremely rare to come across the 
hidden assets of opposition politicians. But we have hundreds of examples of 
corrupt officials and the allies of rogue regimes hiding away their millions. 


[] 


So if there are ways of ending what goes on in the tax havens, the question we 
should be asking is not, as we put it earlier: why should society put up with it? 

But rather: why does society put up with it? 

More specifically: why do our politicians put up with it? Why don’t the big 
nations simply take more radical action to stop it? After all, this is not just about 
fairness. In some cases, outrageous crimes are also involved. 

Because it is the big nations, specifically, that have a lot to lose — and they 
would end up having to threaten themselves with sanctions. 

The USA has its own mainland tax havens like Nevada, Wyoming and 
Delaware, and Mossack Fonseca even has its own branches in the first two of 
these. A US draft bill to combat the abuse of offshore havens, which the then 
Senator Barack Obama tabled in the Senate in 2007, has still not been passed. 
The United Kingdom has some of the most prominent tax havens in its 
jurisdiction, such as its overseas territories and the Channel Islands. Mossfon has 
incorporated more than 100,000 companies in the British Virgin Islands alone. 

And Germany? 

Although it likes to present itself as generally open to reforms, Germany in 
fact ranks as one of those impeding progress in Europe. Again and again we hear 
that whenever there is an attempt to demand greater transparency, whether 
through the EU or other bodies, German representatives operate behind the 
scenes to try to prevent precisely that. The power of the financial lobby, even 
eight years after the global financial crisis, is undiminished. There is also billions 
in foreign money held in German banks — much of it almost certainly untaxed. 

That’s because German banks are only liable to prosecution for tax evasion if 
they do it within Germany. Tax evasion in Brazil or New Zealand, on the other 
hand, does not come under German law. 

Moreover there are also anonymous companies in Germany, as bearer shares 
are permitted there. With these, whoever has the shares in their physical 
possession is deemed the owner of a company. 

For Germany too, a public register of the real owners and part owners of all 
companies without exception would be something new. Certainly it is something 
that has been called for and debated for a long time. Organizations including 


Attac, the Tax Justice Network and Transparency International Deutschland are 
among its public advocates. Detlev von Larcher from Attac, for example, said 
shortly after we published details of the Offshore Secrets in spring 2013: ‘We 
have to put an end to anonymous companies. Shell companies serve no 
economic purpose and are used solely by kleptocrats, tax evaders and money 
launderers. If Germany stands in the way of this, all its strong words 
condemning shadow financial centres are nothing but hypocrisy.’ 

The absurd thing is that a register of companies showing the real owners was 
basically decided on long ago. The participating countries agreed on it at the G8 
summit in Northern Ireland in 2013. It just wasn’t systematically implemented. 
The United Kingdom wants to start with the mainland, excluding the notorious 
British overseas territories. Other countries have said they would set up a 
register of this kind, but that only government authorities would be able to 
access it. It is important, however, that a directory of this kind is also accessible 
to academics and non-governmental organizations — experts with the time and 
will to peruse it, something the state has never had. 


[] 


For Mossack Fonseca, an international clampdown on tax havens would amount 
to a threat to its business. However, once the Panama Papers are published this 
clampdown is likely to be the least of its problems. 

Law enforcement agencies in many of the countries in which our ICIJ 
colleagues publish are bound to take an interest in Mossfon. German 
investigators are already on its tail. The security services will be taking note as 
well. They are likely to be very interested in flows of money and transactions 
designed to obscure — after all, we have identified numerous clients from 
countries known to be used as conduits of terror funding. 

The state investigators will have a field day: employees of the Mossack 
Fonseca group have often displayed conduct that is questionable or even illegal 
or criminal. 

Mossack Fonseca is insistent that due diligence — the duty it has to check who 
it is doing business with — is the law firm’s number one priority. But we have 
numerous examples of how exception after exception is approved, for example 
whenever a valued client doesn’t wish to disclose the name of the true owner. 

But Mossack Fonseca, with its lax business policy, is evidently not an isolated 
case: in 2012 a team of American and Australian researchers wrote to around 
3,700 offshore providers in 182 countries asking to set up a company. Half of the 


providers did not perform the required ID checks, and nearly a quarter did not 
even ask to see identification documents. The researchers dropped hints in their 
letters that the aim of their request was to conceal corruption or even finance 
terrorism. The reactions were shocking, with many providers deliberately 
ignoring all the warning signs. One of the supposed clients presented himself in 
such a way that you couldn’t help suspecting him of financing terrorism. One 
provider replied: ‘It sounds as if you want to establish a company anonymously 
for the state, is that correct? We can do that for a surcharge of $25. If we only 
incorporate one company for you and no more than that we don’t need any 
documents at all from you.’2 

Our perspective on things has also changed, not just because of the leaked files 
and the evidence of wrongdoing they contain, but also as a result of stories told 
to us by Daniel Balint-Kurti of Global Witness, among others. He investigated 
covert deals in Burundi, which, in the usual way, involved amounts running into 
many millions being smuggled out of the country. A country, says Daniel, in 
which the people are so poor that many families have to take turns to eat: the 
adults eat one day and the children the next. 

These people are the victims of the offshore industry. Commercial lawyers 
sitting in European corporate head offices put a lot of thought into how they can 
use offshore companies to ensure their African subsidiaries pay as little tax as 
possible in those countries, and because of this the governments of those 
countries lack the money they need for schools, clothing and food. According to 
a study by the Tax Justice Network, Africa loses out on twice as much money 
through tax evasion as it receives in development aid. 

But it’s not only the poor who are made to suffer. Terrorism, drug smuggling 
and illegal arms trading, for example, are crimes that concern us all and that are 
almost impossible to combat due in part to the concealment tactics of the 
offshore industry. The European Union alone loses out on a thousand billion 
euros a year due to tax fraud and tax evasion. 

The ones who pay the price for the tax haven model are the citizens of all the 
countries whose tax receipts are reduced due to the activities of shell companies, 
or whose public funds are funnelled out of the country and stashed away in the 
Caribbean. And the populations of all the countries whose heads of state 
embezzle money and hide it away in private accounts. 

To end on a more optimistic note: the international community will take 
action. Whether the reforms by the EU, the UN or the Organisation for 
Economic Co-operation and Development (OECD) will go far enough is highly 


doubtful — chances are they won’t in the first instance — but further steps will 
follow. Public pressure, which is bound to increase as a result of the Panama 
Papers, will see to that — a phenomenon we already observed at the time of the 
Offshore Secrets and Luxembourg Tax Files. 

But there is one more thing. 

No one, anywhere, who conducts secret transactions and leaves a digital trace 
is safe any more. Whatever they do, wherever they do it. Anyone who acquires 
an anonymous shell company should know that, in this digital age, secrecy is an 
illusion. 

Somewhere there will always be employees who have had enough of watching 
these goings-on. Somewhere there will always be activists who find holes in 
databases. Somewhere there will always be engineers who occasionally help 
themselves to a few gigabytes of data. 

This leak is not the first leak. Nevertheless, it does perhaps mark the start of 
something. 

The start of the end of the tax havens. 
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THE COLD HEART OF THE OFFSHORE 
WORLD 


Panama City. The view is phenomenal even from a distance: dozens of 
skyscrapers, some taller than others, lined up on the shores of the Pacific, 
testament to a wealth earned partly from the big business of secret money. 
Bienvenidos a Panama. Welcome to Panama. 

Our aeroplane is on its approach to the airport. Below us, just off the coast, we 
see container ships waiting to enter the Panama Canal, on the horizon is the 
jungle, and between them the financial district in which Mossack Fonseca also 
has its head office: the law firm whose activities have occupied us for more than 
a year now. We have now read several thousand pages of internal documents 
from the law firm, know its clients and staff, know which ones have a relaxed 
attitude to the law and also which ones are regularly overruled when they voice 
concerns. Here, clearly, is where the Panama Papers project that we set in 
motion will have its greatest repercussions. Now, with only a few weeks to go 
before we start publishing our findings, we are about to head into the lion’s den. 
Provided we can do it without being noticed, we want to get our own first-hand 
view of Mossfon, its staff and the tax haven of Panama. 

The flight is a good opportunity to take a breather and let what has actually 
happened to us sink in. That an anonymous source contacted us, of all people, 
with the question: ‘Interested in data?’ — and that it then developed into the 
world’s largest investigative project to date. That we now have some 400 
journalists from more than eighty countries working on the files, that we have 
found clues leading to dozens of heads of state in the records, and traces of 
scandals in pretty much every country in the world, trails leading to FIFA and its 
president, to UEFA and its president, various mafia organizations, Hezbollah, 
Al-Qaeda, the Ukrainian president, the prime minister of Iceland (who was 
recently named Iceland’s ‘Businessman of the Year’ — along with the same 
finance minister we also found in the data) — and to Vladimir Putin. 

But now we are also glad that we will soon be going public, as the project is 


consuming us and sapping our strength. We have been helping the ICIJ to 
organize things, and helping journalists all over the world with their research. At 
the Stiddeutsche Zeitung we have seven people just in our investigative team 
working on the Panama Papers and nothing else: besides the two of us there’s 
the data expert Vanessa Wormer, freelance journalist Mauritius Much and our 
SZ colleagues Katrin Langhans, Hannes Munzinger and Gianna Niewel. Then 
there’s the team, growing by the day, that will bring the stories to life on digital 
and online platforms and in print. There’s going to be a special SZ website 
(www.panamapapers.de); for weeks we have had an illustrator working 
exclusively on our project; there’s going to be a ‘Making Of’ film and so on. The 
whole of SZ is involved; colleagues on umpteen desks are working on the stories 
with us. In the last few weeks we have spent countless days just planning how 
the layout, the illustrations, the graphics will look. 

There have also been hours of discussions with the editors-in-chief and our 
lawyers. We have talked through who we can name and who we can’t. Where 
we might have to tone down our wording, and where we can afford to be more 
aggressive. At night we have less and less time to sleep, and at the weekends less 
and less time for our families. We have long stopped counting how many coffees 
and cans of Red Bull we get through each day. There is just so much still to do. 

The thought that it will all soon be over keeps us motivated, as does the sense 
of suspense, growing daily, over how it will all turn out. And whether we’ll be 
able to keep everything under wraps until the publication date — which to be 
honest we don’t really believe. Too many people are involved now. 


[] 


Just a few weeks ago we received a piece of news that caused huge excitement 
among the whole Prometheus team: the Brazilian police had temporarily 
detained several Mossfon employees for suspected involvement in ‘Operation 
Car Wash’, a big, if not the biggest corruption scandal to hit Latin America. 
Essentially it’s alleged that the Brazilian governing party and its allies made 
money out of overpriced contracts between the partly state-owned oil 
corporation Petrobras and several construction companies. In all, several billion 
US dollars are said to have vanished into the shadows. Even former President 
Lula da Silva is suspected of being involved. 

The investigations have been going on since 2014, but new dirty tricks keep 
coming to light. To keep track of it all, Brazilian public prosecutors have 
numbered the various stages of their investigations and given them catchy 


codenames. 

Now, in Phase 22 — codenamed ‘Triplo X’ — the investigators have Mossfon in 
their sights. An arrested Mossfon employee is accused of having hidden 
documents from the police and subsequently destroyed them. These are thought 
to have been due diligence documents, in other words the papers that show how 
serious — or probably how lax in Mossfon’s case — the law firm was about 
checking out its clients, and what steps it took to make sure it only took on clean 
clients. The Brazilian public prosecutor Carlos Fernando dos Santos Lima said 
not long ago at a press conference that although investigations were still 
ongoing, this much was already clear: there was proof that Mossfon was a ‘huge 
money laundering operation’. 

Mossack Fonseca responded by issuing a press release insisting that all 
Mossfon offices are committed to the ‘highest standards of due diligence’ and 
work in compliance with all the international laws and regulations. What’s more, 
it said, Mossack Fonseca Brazil is independent of Mossack Fonseca & Co. 
Panama. The law firm, it said, had nothing to do with Operation Car Wash. It 
was the same old story: everything is fine, the law firm obeys the law and if 
something has gone wrong then it’s the fault of offices that aren’t directly linked 
to Mossfon. We can’t wait to see what’s left of this line of argument when the 
Panama Papers research findings are published in over eighty countries. 

Our Brazilian partners are particularly nervous right now. They are afraid that 
the arrest and the search of Mossfon’s Brazilian office could destroy all their 
work over the last few months, and that laboriously researched details could now 
come to light before we publish our findings worldwide. Marina Walker, the 
ICIJ project manager, has the job of both warming and reassuring. She has to 
reassure colleagues that the story will keep — after all, it’s clear not even the 
Brazilian police have as much information as we do. At the same time she has to 
warn everyone to stick to the agreed timings — we don’t want anyone to panic 
and publish early. 


[] 


We too have been approached on several occasions by colleagues from other 
German media organizations asking what this project is that we are working on. 
That worries us, of course. On the other hand it also stands to reason that 
something of this kind cannot be kept entirely secret. After all, we have 
hundreds of colleagues working on the project worldwide. If each of them were 
to spill the beans to one other person, that would already be nearly 1,000 people 


who would know about it. What’s more, a quick look at the newspaper is all it 
takes to realize the Brothers Obermay/ier haven’t published anything for several 
months now. 

We, meanwhile, try to maintain as relaxed an attitude as possible. Some 
colleagues are aware that we are working on something big, but they obviously 
have no idea what exactly. So when, at a recent evening event a colleague from a 
news magazine said to us with a wink that it must be really stressful for us at the 
moment, we didn’t hesitate to answer: yes it is. The children are really hard work 
at the moment. One of them has just started kindergarten, and the other is just 
learning to ride a balance bike. 


[] 


It was 5°C when we boarded the plane in Munich. Now, stepping out of the 
plane at the Aeropuerto Internacional de Tocumen, it is 35°C, with 60 per cent 
humidity. What a contrast. It’s strange — we have never been to Panama before, 
and yet already, after just a few metres, we spot some familiar sights: the 
Tocumen Royal Saloon, for example. We know from our data that this VIP 
lounge is where Mossfon staff like to meet with important clients who are 
passing through. That will happen to us a lot during the course of our stay: we 
see things and meet people that we’ve never seen before, yet we already know 
them inside out from the data. 

Our project partners at La Prensa newspaper have arranged for us to have a 
driver for the duration of our stay in Panama. A taciturn man, a bear of a man. 
Our own driver — that’s a new experience for us. With the patience of a saint he 
manoeuvres us through the rush hour. We are heading for the high-rise buildings 
in the distance, the Distrito Financiero. We drive past slums — evidence that 
there are still many people in Panama who don’t have enough money for three 
meals a day. And just a few hundred metres from the miserable shacks, flashy 
facades tower up, gleaming in the sunshine. High rises in every conceivable 
shape and size. The Trump Tower, for example, resembles a giant sail, while 
other skyscrapers are reminiscent of rockets, torches or juice cartons with an 
indentation that looks like it’s been made by a giant performing a karate chop. 
Every month new tower blocks appear. Ever taller, ever stranger. This, too, is 
Panama. The most conspicuous to date is the 243-metre Tornillo — also known as 
Revolution Tower — a building that looks like a screw twisted around its own 
axis. 

The Mossack Fonseca building, on the other hand, which has the Tornillo 


reflected in its façade, looks almost like something from another age: it’s only 
three storeys high, is located in a side street, and has a doctor’s surgery on the 
ground floor. The two security guards eye every passer-by suspiciously. They 
look at us sceptically as we drive slowly by in the car, taking photos 
unobtrusively with our phone camera. Could the dark-haired lady who has just 
parked her Toyota in the company car park be Leticia Montoya, the queen of 
offshore, the woman who, on paper, is the director of thousands of companies? 
Could it be Jiirgen Mossack himself sitting in the black SUV that is just turning 
in to the Mossfon basement car park? It’s hugely tempting just to get out of the 
car, march into the building and confront the Mossfon people with our findings. 

But we have to hold on for a few more days, until the letters containing all our 
allegations come out. We’ll already have left the country by then. For safety’s 
sake. 


[] 


We drive to La Prensa. The paper’s offices are located in an industrial area in 
the north east of Panama City, next door to a DIY store and a car dealership. It’s 
a newspaper in the old style: from its offices on the first floor you look down on 
the print shop where the next day’s edition is just being produced. The whole 
building smells of printing ink. 

This is Rita Vasquez’s domain. The deputy editor-in-chief of La Prensa 
receives us in her office: a bare, windowless room. We already know Rita from 
our project meeting in Munich. This is a woman with a very interesting 
background, who herself once worked in the offshore industry, in the British 
Virgin Islands, and she knows a lot of the Mossfon staff in person. Now she calls 
her team together: her husband Scott Bronstein, talented researcher Ereida 
Prieto-Barreiro, and Rolando Rodriguez, a top investigative journalist in Panama 
who has already uncovered quite a number of scandals. They tell us about their 
findings to date: the trails leading to influential Panamanian companies, to major 
scandals from the past, to a former president. ‘This story is going to explode 
with the force of an atomic bomb,’ says Scott. In terms of the attention it is set to 
generate in the national and foreign media, he sees the Panama Papers as being 
on a par with the US invasion of the country in 1989. 

Back then, the eyes of the whole world were on Panama. 

For La Prensa, the Panama Papers is quite an ambitious project. The 
newspaper only has a circulation of around 40,000 — with a mainly upper-class 
readership from the same tier of society as the Panamefios they are finding 


almost daily in the data. 

So it’s no wonder the project is top secret. So far not even ten people at the La 
Prensa editorial offices are in the know. The risk of something getting out is too 
great. In Panama everyone knows everyone else. In fact, we hear at least one 
Mossfon employee used to work at La Prensa. Rita and her colleagues see her 
regularly at barbecues and on the golf course. 

Above all, though, Panama is a country prone to violence. If you ask too many 
questions you put yourself in danger. For example, Rita’s colleagues are 
currently conducting research into a Panamanian company involved in an 
enormous scandal — the Mossfon data provides whole new insights. The 
authorities are on the case as well. However, one of the investigators has 
disappeared without trace, assumed dead. Another public official involved in the 
case was stabbed on his way to a meeting. 

La Prensa, too, is expecting the worst. Some time ago the editorial team 
bought a set of bulletproof vests. Once the material is published, all the 
journalists involved are meant to wear them. When they go outside, they will 
need to be accompanied by a bodyguard. The bodyguard we had assumed to be 
our driver. As it turns out, Rita has been looking after our safety too. 


[] 


Our bodyguard, who really doesn’t leave our side the whole time we’re there, 
chauffeurs us to Altos del Golf, the exclusive residential area where Panama’s 
autocratic leader Manuel Noriega once lived. There are expensive-looking 4x4s 
and limousines in front of the houses, cameras pointing down at visitors from all 
sides, and barbed wire and electric fences to protect the owners from unwelcome 
visitors. Two former presidents of Panama live here, protected by numerous 
security guards, and Mossfon co-owner Jürgen Mossack is also said to live here. 


[] 


This trip, for us, is like a crash course in offshore studies. We take a zigzag route 
through Panama City, this tropical version of Manhattan, drive through the old 
town, Casco Viejo, the financial district, and the commuter town Costa del Este. 
We meet government advisers, public officials, money laundering experts, 
former investigators and representatives of the Panamanian law society. We 
follow their arguments, listen as some say that this whole tax haven business is 
just idle talk fuelled by the envy of other countries, foremost among them the 
USA, which merely wants to divert people’s attention from the fact that it has its 


very own tax havens in the form of Delaware and Nevada. We hear excited talk 
about the fact that, just a few days previously, Panama was finally taken off the 
OECD’s grey list — and discuss why the country is still blacklisted by the EU. 
We listen to the critics who tell us that it’s obvious, surely, that Panama’s wealth 
is at least partly attributable to the fact that so many advisers knowingly do 
business with all kinds of dubious clients, with drug dealers, fraudsters and 
sanctions violators. 

With every conversation it becomes clearer to us how divided Panama is, how 
the battle lines are drawn between the tax haven apologists and the champions of 
transparency. But above all we start to realize the extent of the legal problems 
that are brewing for Mossfon and its owners, considering its years of doing 
business with sanctioned parties, the fact that the law firm is obviously not able 
to name the beneficial owners of all the companies it manages, and its use of 
nominee beneficial owners. 

The matter of the nominee directors in particular sticks in our mind: Carlos 
Barsallo, chairman of the ethics committee of the Panamanian Bar Association, 
tells us that these nominee directors can be held accountable for any statutory 
violations by the companies they are in charge of — at least on paper — and that 
they could face the threat of claims for compensation running into millions. 

We wonder whether the nominee directors we found in the Mossfon files are 
aware of this. People like Leticia Montoya, the queen of offshore, who has been 
the director of more than 25,000 companies, including companies that managed 
secret accounts, and firms that also crop up in the investigations into the FIFA 
scandal. If Montoya were taken to court over the activities of just one company 
it would probably ruin her; as we have seen, her earnings are paltry. So why 
does she do it? Why does she take that risk? We want to ask her. We know her 
address from the files. 


[] 


We leave the glamorous world of Panama City. We cross the Panama Canal and 
travel for forty minutes inland, to Vacamonte. The wind blows plastic bags 
across the street. Rubbish burns next to a kiosk. It stinks. There are rows of 
single-storey houses, some looking more like a ruin than a shelter. The young 
men we ask for directions eye us suspiciously. We are starting to understand 
why Rita didn’t want to let us drive here unless we brought someone from La 
Prensa as well as our bodyguard. 

Vacamonte is a no-go area, and even our La Prensa colleagues have never 


been here before. Here is where the queen of offshore lives. 

After half an hour of driving around, we finally find Leticia Montoya’s house: 
a decent-looking bungalow for the neighbourhood. A Japanese-made car is 
parked under a car port, with children’s toys lying next to it. A grumpy-looking 
older gentleman opens the door. He says that no, his wife is not there, and asks 
us what we want to talk to her about. 

Well, how shall we put it: we want to talk about her offshore companies. How 
she manages to run thousands of companies. And whether she realizes what 
scandal-ridden companies are among them. 

It’s a strange conversation. Somehow, Montoya’s husband doesn’t seem very 
clued up about his wife’s work. At some point he pulls out his mobile phone and 
dictates her number, suggesting that we give her a call. 

She doesn’t answer. But she now has the number of our La Prensa colleague 
on her display. 


[] 


On the way back we talk for a long time about the strange phenomenon of the 
nominee directors. They serve a useful purpose for people who have something 
to hide, and for companies like Mossack Fonseca they are big business. But what 
about the nominee directors themselves? They are the exploited underclass of 
the offshore world — there’s really no other way of putting it. 

A little while later our La Prensa colleague’s mobile phone rings. Leticia 
Montoya is on the line. She’s furious. Why did her idiot husband give us her 
number in the first place, she yells down the phone. 

Of course, she says, she is the director of thousands of companies. 

But how does she manage to perform her duties when she has such a mass of 
offshore companies — thousands of them — to look after? 

She is remarkably open: ‘I have no idea what the companies are for, who they 
were sold to, or what exactly they do.’ 

For anything else, she says, we will have to contact the registered agent — in 
this case, as we already know: Mossack Fonseca. 

Then she hangs up.t 


[] 


Next we set out to find Ramses Owens. He worked as a lawyer for Mossfon until 
2010, more specifically for MF Trust, one of the departments that work directly 
with the end clients themselves. We know him from hundreds of emails, a lot of 


them decorated with smileys, hence our nickname for him: Smiley Man. It was 
Ramses Owens who offered Mossfon clients the ‘nominee beneficial owner’ or 
‘natural person nominee’ service mentioned earlier in this book and sent them 
the relevant documentation, in other words offering them the services of a real 
person who, in dealings with banks and others, passes himself off as the owner 
of the company in place of the actual owner, thereby making a mockery of anti- 
money laundering measures. For how is a bank, for example, supposed to check 
whether its client is a criminal if it thinks it is checking the client’s details but in 
fact is only checking the details of some front man — not realizing that he is 
merely standing in for someone else? 

Owens now works just a few hundred metres from the Mossfon office at his 
own law firm. He set it up with a friend from his student days. They were the 
two best law students in their year, Owens announces, almost as soon as we’ve 
introduced ourselves. Modesty isn’t his thing. He takes us through his chambers, 
raves about the private chef who cooks for him and his colleagues every day, 
tells us about the high standards his law firm is committed to. On a table in his 
office he shows us all the magazines and newspapers that have written about 
him. 

Owens is a man who likes the limelight. He immediately agrees to an 
interview, and has no objection to us filming it. ‘I have nothing to hide,’ he says. 
It’s important, he says, for the industry to be candid towards journalists. After 
all, its good reputation is at stake, he says. And it has suffered badly since the 
US magazine Vice reported on Mossfon — and him — in December 2014. The 
whole thing, Owens is convinced, was a stitch-up by Jewish Republicans. 

We can’t help grinning. Vice only wrote about all the rumours that were 
circulating. We, on the other hand, will soon be supplying proof. What, we 
wonder, will he say then? A conspiracy by the CIA and the Freemasons? 

In any event, Owens is unstoppable. He enthuses about compliance and due 
diligence, rules of transparency, measures designed to prevent shady characters 
from taking advantage of the services on offer. Potential clients are turned away 
if it’s clear they are trying to set up shell companies in order to dodge taxes. 
After all, he said, law firms that incorporate shell companies have to adhere to 
the rules. And so on. 

The words seem absurd coming from someone like Ramses Owens, whom we 
find in our data in all kinds of highly problematic connections. And he even goes 
one better. Mossfon, he says, is a model of prestige and integrity. 

We change the subject: we’d like to talk about nominee beneficial owners, we 


say (in other words, the service Owens offered clients during his time at 
Mossfon). 

We might have expected him to beat about the bush or hide behind empty 
phrases, as lawyers like to do when things get hairy. 

But Owens says something astonishing: that the practice, in his view, amounts 
to money laundering. 

The beneficial owner needs to be disclosed, he says. Anyone who doesn’t do 
that and has someone else pretend to be the real owner is acting illegally. Owens 
picks up a book lying on his desk: the Codigo Penal, the Panamanian penal code. 
In here, says Owens meaningfully, it is written that the use of nominee beneficial 
owners is punishable with a lengthy prison sentence. 

We are flabbergasted. 

So even after more than a year of studying the inner workings of Mossack 
Fonseca, there are still things that can leave us completely astounded. And the 
best thing is: we filmed Owens’s words — we’ve got them recorded.2 


[] 


Our last drive through Panama City. We pass Jürgen Mossack’s house, the 
financial district and the Mossack Fonseca building one last time. Then we drive 
to Tocumen Airport, where Mossfon people like to meet clients who have just 
flown in, in an exclusive lounge. 

We take a last look at Panama from the air. 

We won’t be coming back. 


Epilogue 


Shortly after 7.30pm, Sunday, 3 April 2016. There is just under half an hour to 
wait until the Panama Papers are finally published — at 8pm, the results of our 
research will be made public on the Stiddeutsche Zeitung website. In fact, the 
web pages featuring our stories are already ‘live’ and online, at least unofficially. 
The elaborate website created by our colleagues from ‘digital’ has to be tested 
under real conditions. We’re not particularly happy about that, of course, but our 
colleagues confidently dispel all our objections. No one will accidentally 
stumble upon our Panama reports in the half hour before the official publication 
time. You would have to know about our project and enter the exact web address 
to find it. In other words, you would have to deliberately search for it. So we 
spend the last few minutes testing this and that, reading through the English 
translations once more and preparing the first tweets so that we can get started at 
8pm on the dot. 

Our stories for the first day of publication have been ready for a long time. All 
the legal checks have been carried out, all the revisions are complete and all the 
images prepared. The first newspapers have been printed and loaded onto the 
trucks on their way to our readers. 

Everything is ready. Only fifteen minutes to go. 

It goes without saying that we are all very nervous. We have been working on 
this for over a year and no one knows what will happen next. How will other 
media institutions take up the story? How will the general population respond? 
Or will the story fail to attract the attention it deserves, dismissed as ‘just another 
leak’? 

A colleague calls unexpectedly: ‘Edward Snowden has just tweeted us!’ 

We look at each other, baffled. 7.48pm. Edward Snowden? 

We go on Twitter, and indeed, Edward Snowden has tweeted this message to 
his 2 million followers: ‘Biggest leak in the history of data journalism just went 
live, and it’s about corruption.” Snowden also provides a link to the Stiddeutsche 
Zeitung website and the English version of our article on Iceland and the shell 
companies owned by Prime Minister Sigmundur Gunnlaugsson and two other 
cabinet members. 

Snowden is spreading the word about our investigation. That’s not a bad sign. 
A little later we are also retweeted by WikiLeaks. And then the clocks strike 
8pm. 


Madness breaks out. 

Before long, #panamapapers is the top Twitter topic, generating hundreds of 
thousands of tweets. Globally. By the following day, the Panama Papers will be 
the topic of hot discussion on every continent. It’s on the front pages of 
newspapers in Thailand, South Korea, Canada, South America, Africa and 
Australia, and of course in Europe, as we knew it would be. In the USA, the 
story dominates the front pages of the Washington Post, the Wall Street Journal, 
the Financial Times and the New York Times for days, even though none of these 
papers was involved in the collaborative project. All the major news channels 
are reporting on the story. The Panama Papers is the main story wherever we 
turn. 

Bob Woodward, one of the most important investigative journalists in the 
world and the man who brought down President Richard Nixon by exposing the 
Watergate scandal, calls our project ‘a triumph of journalism’. The New York 
Times suggests the story may even have changed the face of journalism forever. 


[] 


Within a few weeks of publication it’s clear that the story has not only attracted 
far more attention among the media and the public than we expected, it has also 
triggered a far more consequential response from the political sphere. 

Barack Obama makes a statement on the Panama Papers and declares tax 
evasion to be a serious and pressing problem. The G20 countries respond with a 
new catalogue of measures, while the EU parliament even sets up a dedicated 
committee of inquiry. 

A long list of more concrete measures has also been carried out. Raids and 
searches take place in several countries. The authorities search UEFA’s offices 
and its marketing agency in Switzerland, Amedeo Modigliani’s Seated Man with 
a Cane is seized at the Geneva Freeport, and officials search the Mossack 
Fonseca offices in El Salvador and Peru. 

Then, finally, police raid the Mossack Fonseca headquarters in Panama. Investigators 
work through the night, spending twenty-seven hours working their way through the 
building floor by floor, collecting what appears to be a huge volume of data. The authorities 
later find piles of shredded documents in another Mossfon building in Panama City. 

As a result of the Panama Papers, investigations are launched in several 
countries into the business activities of hundreds of individuals — not only 
fraudsters, drug lords and private individuals, but also Mossfon owners Jiirgen 
Mossack and Ramon Fonseca. The banking regulator in New York orders 


thirteen banks — among them Deutsche Bank, ABN AMRO and Société 
Générale — to hand over all their data on business dealings with Mossack 
Fonseca. At the same time, several acting heads of government also come under 
pressure — in Iceland, Argentina, Malta, Pakistan and the United Kingdom. 

But let’s take things one step at a time. 


[] 


The Icelandic prime minister Sigmundur Gunnlaugsson’s involvement in the 
scandal had already become known three weeks before the publication of the 
Panama Papers as a result of a memorable interview conducted by Swedish 
journalists and our Icelandic colleague Jóhannes Kristjánsson. After a couple of 
innocuous questions — asking for Gunnlaugsson’s views on shell companies, the 
Icelandic banking crisis and ethics in the offshore world — the prime minister 
was presented with an unwelcome surprise: 

‘What about you, Mr Prime Minister, do you or did you have any connection 
yourself to an offshore company?’ 

‘Myself? No...’ 

Gunnlaugsson clearly has no idea what to say and begins to stammer. 

Yes, he then says, he has worked with businesses that have connections to 
offshore companies. But he has always declared everything to the tax authorities. 
What kind of strange questions are these? 

‘I can confirm I have never hidden any of my assets.’ 

Follow-up question: ‘So you have never had any connection to an offshore 
company?’ 

‘As I said, I have always declared my assets.’ 

Then comes the critical question: ‘What can you tell me about a company 
called Wintris?’ 

Silence. Prime Minister Gunnlaugsson stutters. 

‘Well, it’s a company, if I recall correctly, which is associated with one of the 
companies that I was on the board of.’ 

Silence. 

‘And it had an account, which as I have mentioned, has been on the tax 
account since it was established.’ 

For Gunnlaugsson, the penny begins to drop. At this point, our Icelandic 
colleague Johannes, who had until then remained in the background, steps 
forward. 

“Why haven’t you said that you have connections with Wintris?’ 


Gunnlaugsson starts to lose his cool. 

‘As I’ve said, that’s all been declared in my tax return since the beginning.’ 

Why didn’t he disclose the company in the parliament’s register of interests? 

Because it was a ‘special case’. 

‘Is this company owned by you?’ 

‘My wife sold a part of the company to her family. A bank was then appointed 
to take care of it and they made some arrangements, the result of which was this 
company.’ 

‘What holdings does the company own?’ 

Gunnlauggson stands up, breaks off the interview and leaves the room. 

Even before the interview is made public, the prime minister’s wife writes a 
Facebook post saying that Wintris was always owned by her and her alone. 
Meanwhile, her husband gives a newspaper and radio interview — but it’s all in 
vain. 

On 3 April our colleague Johannes Kristjansson broadcasts the interview on 
television. The programme gets an audience share of more than 50 per cent and 
is watched online thousands of times within just a few hours. One commentator 
calls it the ‘greatest breach of trust in the history of the Icelandic parliament’. 
Rumours are already circulating on the evening of the broadcast that 
Gunnlaugsson will resign and there are mass demonstrations in Iceland on the 
following day. Thousands of people gather in the square outside the Althing, 
Iceland’s parliament. They press against the crowd barriers, beating against them 
with bicycle helmets and saucepan lids. Bananas, drinks cans and rolls of toilet 
paper are hurled against the facade of the parliament building. 

More than 20,000 people march on the streets to demand their prime minister’s 
resignation — a huge number for a country with a population of only 330,000. 
Imagine 7 million Germans demonstrating against Angela Merkel or 4.5 million 
Brits marching against David Cameron. 

An undignified spectacle then begins, with Gunnlaugsson announcing that he 
will not stand down, then saying a day later that he will resign — only to retract 
his resignation shortly afterwards. In the end, he announces that he is 
temporarily handing over power. 

And with that, Sigmundur Gunnlaugsson becomes the first head of 
government forced to resign his position as a consequence of the data leaked to 
us more than a year earlier by our source — now known to the world as ‘John 
Doe’. 


[] 


Our British colleagues discover Blairmore Holdings at a very early stage in their 
investigations. It’s an investment fund established in Panama in 1982 by Ian 
Cameron, the father of the current British prime minister. For us, this was just 
one case among many. Of course it is sensational that, of all people, the father of 
the man keen to be seen leading the charge against tax havens set up obscure 
company structures in exactly those countries. But can a son be charged with his 
father’s crimes? We felt not. 

What we hadn’t considered, however, was that David Cameron himself could 
have profited from this very fund — or that he would choose an unfortunate 
communication strategy to boot. On day one of the global Panama Papers 
revelations, Cameron’s spokesperson dismisses questions about the fund, saying 
that it is ‘a private matter’. On day two, Cameron himself makes a personal 
statement — an announcement that initially appears to be clear enough: ‘I have no 
shares, no offshore trusts, no offshore funds, nothing like that. And so that, I 
think, is a very clear description.’ The prime minister’s office also publishes a 
written statement on the same day: ‘To be clear, the prime minister, his wife and 
their children do not benefit from any offshore funds. The prime minister owns 
no shares.’ On day three, Cameron’s PR specialists eventually attempt to provide 
more clarity: “There are no offshore funds/trusts which the prime minister, Mrs 
Cameron or their children will benefit from in future.’ 

By now, the prime minister has denied benefitting personally from offshore 
companies in the present and future tenses. But what about the past? 

David Cameron eventually answers this question in a TV interview with ITV 
News: ‘We owned 5,000 units in Blairmore Investment Trust, which we sold in 
January 2010.’ The prime minister admits having profited from his father’s 
offshore fund. Thousands of protesters have demanded his resignation in a 
number of demonstrations in London since he made this admission. 


[] 


At almost exactly the same time, thousands of demonstrators in Malta gather 
outside the prime minister’s office to call on Joseph Muscat, the social- 
democratic head of government, to stand down. The banners carry the word 
‘Barra!’, Maltese for ‘Out!’ There is soon talk of a ‘second Iceland’ — a second 
island state whose government has been plunged into crisis by the revelations of 
the Panama Papers. 

Two of Prime Minister Muscat’s allies — Energy and Health Minister Konrad 
Mizzi and Chief of Staff Keith Schembri — have evidently concealed money 


from Maltese tax authorities using a network of companies in Panama and trusts 
in New Zealand. Both confirm that they owned the companies and trusts. 
However, they claim they did not know that they should have declared these to 
the Maltese authorities. On 28 April, Mizzi steps down from his position to 
become a minister without portfolio. 


[] 


The Panama Papers also got Argentinian president Mauricio Macri, elected in 
November 2015, into hot water. According to our documents, he was the 
director of a shell company called Fleg Trading Ltd for a period of time. It was 
also revealed that he signed over his share in a hydroelectric power company to 
an offshore company owned by his father just a few weeks before the 
revelations. Three months after he took office. 

And as if that was not enough, a number of Macri’s allies also appear in the 
Panama Papers or have been linked to offshore companies over the course of the 
revelations. Among them is Néstor Grindetti, Macri’s former finance minister 
for the city of Buenos Aires; the two men travelled to Panama together in 2013, 
officially to arrange an urban development loan. Another name that comes up is 
Daniel Angelici, who — with Macri’s support — was elected president of Boca 
Juniors football club. The list also includes Macri’s Human Rights 
Commissioner Claudio Avruj, Director of the Federal Intelligence Agency 
Gustavo Arribas, several of Macri’s brothers, and his cousin Jorge, mayor of the 
municipality of Vicente Lopez on the outskirts of the capital, Buenos Aires. 

When the story broke, the left-leaning daily newspaper Pdgina/12 featured on 
the cover a photo of Macri, his head bowed, with the headline ‘Panamacri’. 
Argentina’s public prosecutor has launched an investigation after a member of 
the opposition reported Macri to the authorities. The national anti-corruption 
office also intends to investigate the case. 


[] 


In Pakistan, meanwhile, Prime Minister Nawaz Sharif came under fire after 
revelations about shell companies owned by his children, and news that they 
held London property worth millions of pounds. When Sharif left Pakistan in 
mid-April to undergo medical treatment in London, as the official explanation 
would have it, rumours immediately began to circulate that he would not return 
until the investigation into the matter was concluded. The opposition called for 
mass demonstrations. 


In Spain, Minister for Industry José Manuel Soria resigned after trying for 
days to talk his way out of his entanglement in offshore businesses. He even 
claimed that the person named in the Panama Papers was not him, but merely his 
namesake. 

In Denmark, directors from the country’s three largest banks — Nordea, Danske 
Bank and Jyske Bank — were called upon to answer questions before a 
parliamentary commission; a number of Finnish political parties and the 
country’s most powerful union closed their accounts with Nordea; senior 
bankers in Austria and the Netherlands were forced to resign. So too the head of 
the Chilean branch of Transparency International, whose name came up in the 
Panama Papers in connection with at least five shell companies. 

At FIFA, Juan Pedro Damiani, founding member of the ethics committee, 
handed in his resignation after it was revealed in the Panama Papers that he had 
done business with three of the accused FIFA officials. 


[] 


The Panama Papers has also had some negative consequences. 

The term ‘Panama Papers’ was censored in China within a few hours of the 
story’s initial publication. One lawyer was arrested for sharing a comic photo 
montage showing the current leader of the Communist Party and two former 
leaders — Xi Jinping, Deng Xiaoping and Jiang Zemin — wading through the 
Panama Canal. 

In Hong Kong, Keung Kwok-yuen, the executive chief editor of the Ming Pao 
newspaper, was dismissed hours after the Panama Papers revelations were made 
public. The official reason given for the sacking was that the paper had to cut 
costs. 

Our newspaper colleagues in Panama had to print the first issues about the 
Panama Papers at a secret location for fear that someone would use violence to 
stop their work. 

One of our Venezuelan colleagues was dismissed by her employer, the pro- 
regime newspaper Ultimas Noticias. She had kept her involvement in the 
Panama Papers project a secret from the paper, fearing that her bosses might 
give the parties under investigation advance warning of the enquiry. 

The website of our Tunisian partner — the online magazine Inkyfada — was 
attacked by hackers after it reported on the offshore connections of a former 
adviser to the president. 

And in Ecuador, President Rafael Correa tweeted the names of the journalists 


involved in the Panama Papers investigation. The message was clear: he wanted 
to put them under pressure. A few days later it was revealed that Correa’s name 
also appears in the Panama Papers, in connection with a company whose 
activities had still not been fully clarified as this edition of the book went to 
press. 


[] 


Of all the stories, we were most worried about the consequences that would 
emerge following the revelations regarding Putin’s best friend, Sergei Roldugin. 
For reasons of safety, this was the case in which we waited for the longest period 
of time before confronting the parties involved. After all, one of those parties 
was Vladimir Putin himself. It would be impossible to predict how he would 
respond. Our Russian colleagues feared for their lives. 

It was the strangest feeling to be sending dozens of questions to Putin’s 
personal press secretary, Dmitry Peskov, a few days before publication — the 
same Peskov, incidentally, whose wife we found listed in the data as being a 
temporary owner of a shell company. We did not expect an answer. 

On Easter Monday, Peskov appeared before the Russian media and stated that 
the Kremlin had received a ‘list of questions prepared in an interrogation-type 
manner’. These, he claimed, were part of an ‘information attack’ on the 
president and his family. Allegations were being made regarding a multitude of 
offshore companies — companies Putin knew nothing about. Peskov suspected 
that it was not only journalists behind this ‘attack’, but also ‘representatives of 
special services and other organizations’. 

For the press secretary of the Russian president to respond publicly to a 
journalist’s questions with a demonstration of anger like this is by no means an 
everyday occurrence. To be more precise, it has never happened before. 

The consequences for two of our Russian colleagues were severe. Their photos 
were shown on Russian television, and the pair branded as agents disseminating 
propaganda on behalf of the American government. Attempts were made to 
blackmail the chief editor of Novaya Gazeta to prevent him from publishing the 
story. He published the story nevertheless and is now facing a tax audit — a 
standard reprisal in Russia. Our Russian colleague Roman Anin wrote to us a 
few days later: ‘We don’t regret anything and we’re ready to face the 
consequences.’ 

Just two weeks after the revelations, Vladimir Putin made his annual 
appearance on the TV programme Direct Line to answer questions submitted by 


the people. 

He made use of this appearance to launch an attack on us: ‘Who makes them, 
these provocations? We know that there are some staff from official American 
institutions there. Where did the article first appear? I asked Peskov, my press 
secretary, yesterday: in the Süddeutsche Zeitung, which is part of a media 
holding, and that media holding is owned by an American financial corporation: 
Goldman Sachs.’ 

This statement is incorrect. The Süddeutsche Zeitung is not owned by 
Goldman Sachs, neither directly nor indirectly. It is a subsidiary wholly owned 
by the Süddeutscher Verlag, of which company 18.75 per cent is owned by a 
Munich publishing family and 81.25 per cent by Südwestdeutsche 
Medienholding — and the latter company is also not owned by the American 
investment bank. The Kremlin later apologized for misrepresenting the facts. 

One crucial statement was almost drowned out by the hullabaloo, namely 
Putin’s acknowledgement on the Direct Line programme that the information in 
the Panama Papers was accurate. ‘The information is correct,’ he confirmed. A 
few days later, he declined a request by the Süddeutsche Zeitung for an 
interview. 


[] 


In all honesty, we had not expected much from our revelations. We hoped to 
attract the interest of our readers and we expected trite demands from politicians 
across the globe. But real change? Genuine progress in the battle against the 
shady world of offshore business? Not really. 

‘Panama is the last major holdout that continues to allow funds to be hidden 
offshore from tax and law enforcement authorities’, wrote Angel Gurria, 
secretary-general of the OECD, just a few hours after our stories were first 
published. 

A few days later, Panama’s President Juan Carlos Varela announced that 
bearer shares would be abolished. Furthermore, Panama would participate in the 
global exchange of tax and financial data. Ninety-seven countries had already 
signed up to the agreement, among them the British Virgin Islands, 
Luxembourg, Switzerland and the Channel Islands. Panama would be country 
number ninety-eight. 

However, we believe that the most effective action in the battle against tax 
havens would be to establish a global register revealing the true owners of shell 
companies. That, as UK Chancellor George Osborne eloquently put it, would be 


‘a hammer blow against those that would illegally evade taxes and hide their 
wealth in the dark corners of the financial system’. The only thing we have seen 
used so far in the battle against tax havens is a pair of kid gloves. 

The debate triggered by the Panama Papers will continue for a long while yet — 
and it illustrates that a very different world is an achievable possibility. 

Where there’s a will. . . 


THE REVOLUTION WILL BE DIGITIZED 


A statement by John Doe 


Income inequality is one of the defining issues of our time. It affects all of us, 
the world over. The debate over its sudden acceleration has raged for years, with 
politicians, academics and activists alike helpless to stop its steady growth 
despite countless speeches, statistical analyses, a few meagre protests and the 
occasional documentary. Still, questions remain: why? And why now? 

The Panama Papers provide a compelling answer to these questions: massive, 
pervasive corruption. And it’s not a coincidence that the answer comes from a 
law firm. More than just a cog in the machine of ‘wealth management’, Mossack 
Fonseca used its influence to write and bend laws worldwide to favour the 
interests of criminals over a period of decades. In the case of the island of Niue, 
the firm essentially ran a tax haven from start to finish. Ramon Fonseca and 
Jiirgen Mossack would have us believe that their firm’s shell companies, 
sometimes called ‘special purpose vehicles’, are just like cars. But used car 
salesmen don’t write laws. And the only ‘special purpose’ of the vehicles they 
produced was too often fraud, on a grand scale. 

Shell companies are often associated with the crime of tax evasion, but the 
Panama Papers show beyond a shadow of a doubt that although shell companies 
are not illegal by definition, they are used to carry out a wide array of serious 
crimes that go beyond evading taxes. I decided to expose Mossack Fonseca 
because I thought its founders, employees and clients should have to answer for 
their roles in these crimes, only some of which have come to light thus far. It 
will take years, possibly decades, for the full extent of the firm’s sordid acts to 
become known. 

In the meantime, a new global debate has started, which is encouraging. 
Unlike the polite rhetoric of yesteryear that carefully omitted any suggestion of 
wrongdoing by the elite, this debate focuses directly on what matters. 

In that regard, I have a few thoughts. 

For the record, I do not work for any government or intelligence agency, 
directly or as a contractor, and I never have. My viewpoint is entirely my own, 
as was my decision to share the documents with the Stiddeutsche Zeitung and the 
International Consortium of Investigative Journalists (ICIJ), not for any specific 
political purpose, but simply because I understood enough about their contents to 


realize the scale of the injustices they described. 

The prevailing media narrative thus far has focused on the scandal of what is 
legal and allowed in this system. What is allowed is indeed scandalous and must 
be changed. But we must not lose sight of another important fact: the law firm, 
its founders and employees actually did knowingly violate myriad laws 
worldwide, repeatedly. Publicly they plead ignorance, but the documents show 
detailed knowledge and deliberate wrongdoing. At the very least we already 
know that Jiirgen Mossack personally perjured himself before a federal court in 
Nevada, and we also know that his information technology staff attempted to 
cover up the underlying lies. They should all be prosecuted accordingly with no 
special treatment. 

In the end, thousands of prosecutions could stem from the Panama Papers, if 
only law enforcement could access and evaluate the actual documents. The ICIJ 
and its partner publications have rightly stated that they will not provide them to 
law enforcement agencies. I, however, would be willing to cooperate with law 
enforcement to the extent that I am able. 

That being said, I have watched as one after another, whistle-blowers and 
activists in the United States and Europe have had their lives destroyed by the 
circumstances they find themselves in after shining a light on obvious 
wrongdoing. Edward Snowden is stranded in Moscow, exiled by the Obama 
administration’s decision to prosecute him under the Espionage Act. For his 
revelations about the NSA, he deserves a hero’s welcome and a substantial prize, 
not banishment. Bradley Birkenfeld was awarded millions for his information 
concerning Swiss bank UBS — and was still given a prison sentence by the 
Justice Department. Antoine Deltour is presently on trial for providing 
journalists with information about how Luxembourg granted secret ‘sweetheart’ 
tax deals to multinational corporations, effectively stealing billions in tax 
revenues from its neighbour countries. And there are plenty more examples. 

Legitimate whistle-blowers who expose unquestionable wrongdoing, whether 
insiders or outsiders, deserve immunity from government retribution, full stop. 
Until governments codify legal protections for whistle-blowers into law, 
enforcement agencies will simply have to depend on their own resources or 
ongoing global media coverage for documents. 

In the meantime, I call on the European Commission, the British Parliament, 
the United States Congress and all nations to take swift action not only to protect 
whistle-blowers, but to put an end to the global abuse of corporate registers. In 
the European Union, every member state’s corporate register should be freely 


accessible, with detailed data plainly available on ultimate beneficial owners. 
The United Kingdom can be proud of its domestic initiatives thus far, but it still 
has a vital role to play by ending financial secrecy on its various island 
territories, which are unquestionably the cornerstone of institutional corruption 
worldwide. And the United States can clearly no longer trust its fifty states to 
make sound decisions about their own corporate data. It is long past time for 
Congress to step in and force transparency by setting standards for disclosure 
and public access. 

And while it’s one thing to extol the virtues of government transparency at 
summits and in soundbites, it’s quite another to actually implement it. It is an 
open secret that in the United States, elected representatives spend the majority 
of their time fundraising. Tax evasion cannot possibly be fixed while elected 
officials are pleading for money from the very elites who have the strongest 
incentives to avoid taxes relative to any other segment of the population. These 
unsavoury political practices have come full circle and they are irreconcilable. 
Reform of America’s broken campaign finance system cannot wait. 

Of course, those are hardly the only issues that need fixing. Prime Minister 
John Key of New Zealand has been curiously quiet about his country’s role in 
enabling the financial fraud mecca that is the Cook Islands. In Britain, the Tories 
have been shameless about concealing their own practices involving offshore 
companies, while Jennifer Shasky Calvery, the director of the Financial Crimes 
Enforcement Network at the US Department of the Treasury, just announced her 
resignation to work instead for HSBC, one of the most notorious banks on the 
planet (not coincidentally headquartered in London). And so the familiar swish 
of America’s revolving door echoes amid deafening global silence from 
thousands of yet-to-be-discovered ultimate beneficial owners who are likely 
praying that her replacement is equally spineless. In the face of political 
cowardice, it’s tempting to yield to defeatism, to argue that the status quo 
remains fundamentally unchanged, while the Panama Papers are, if nothing else, 
a glaring symptom of our society’s progressively diseased and decaying moral 
fabric. 

But the issue is finally on the table, and that change takes time is no surprise. 
For fifty years, executive, legislative and judicial branches around the globe 
have utterly failed to address the metastasizing tax havens spotting Earth’s 
surface. Even today, Panama says it wants to be known for more than papers, but 
its government has conveniently examined only one of the horses on its offshore 
merry-go-round. 


Banks, financial regulators and tax authorities have failed. Decisions have 
been made that have spared the wealthy while focusing instead on reining in 
middle-and low-income citizens. 

Hopelessly backward and inefficient courts have failed. Judges have too often 
acquiesced to the arguments of the rich, whose lawyers — and not just Mossack 
Fonseca — are well trained in honouring the letter of the law, while 
simultaneously doing everything in their power to desecrate its spirit. The media 
has failed. Many news networks are cartoonish parodies of their former selves, 
individual billionaires appear to have taken up newspaper ownership as a hobby, 
limiting coverage of serious matters concerning the wealthy, and serious 
investigative journalists lack funding. The impact is real: in addition to the 
Süddeutsche Zeitung and the ICIJ, and despite explicit claims to the contrary, 
several major media outlets did have editors review documents from the Panama 
Papers. They chose not to cover them. The sad truth is that among the most 
prominent and capable media organizations in the world there was not a single 
one interested in reporting on the story. Even WikiLeaks didn’t answer its tip 
line repeatedly. 

But most of all, the legal profession has failed. Democratic governance 
depends upon responsible individuals throughout the entire system who 
understand and uphold the law, not who understand and exploit it. On average, 
lawyers have become so deeply corrupt that it is imperative for major changes in 
the profession to take place, far beyond the meek proposals already on the table. 
To start, the term ‘legal ethics’, upon which codes of conduct and licensure are 
nominally based, has become an oxymoron. Mossack Fonseca did not work in a 
vacuum — despite repeated fines and documented regulatory violations, it found 
allies and clients at major law firms in virtually every nation. If the industry’s 
shattered economics were not already evidence enough, there is now no denying 
that lawyers can no longer be permitted to regulate one another. It simply 
doesn’t work. Those able to pay the most can always find a lawyer to serve their 
ends, whether that lawyer is at Mossack Fonseca or another firm of which we 
remain unaware. What about the rest of society? 

The collective impact of these failures has been a complete erosion of ethical 
standards, ultimately leading to a novel system we still call capitalism, but which 
is tantamount to economic slavery. In this system — our system — the slaves are 
unaware both of their status and of their masters, who exist in a world apart 
where the intangible shackles are carefully hidden among reams of unreachable 
legalese. The horrific magnitude of detriment to the world should shock us all 


awake. But when it takes a whistle-blower to sound the alarm, it is cause for 
even greater concern. It signals that democracy’s checks and balances have all 
failed, that the breakdown is systemic, and that severe instability could be just 
around the corner. So now is the time for real action, and that starts with asking 
questions. 

Historians can easily recount how issues involving taxation and imbalances of 
power have led to revolutions in ages past. Then, military might was necessary 
to subjugate peoples, whereas now, curtailing information access is just as 
effective, or more so, since the act is often invisible. Yet we live in a time of 
inexpensive, limitless digital storage and fast Internet connections that transcend 
national boundaries. It doesn’t take much to connect the dots: from start to 
finish, inception to global media distribution, the next revolution will be 
digitized. 

Or perhaps it has already begun. 
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headway on many stories, especially the Siemens case, and not least Petra Blum, 
who spent months digging out details of the Roldugin network and its dealings. 
Thanks also to John Goetz, Toni Kempmann and Reiko Pinkert, who spent 
weeks analysing documents. 


[] 


We are grateful to our families for their patience and infinite understanding. We 
have asked a lot of them in the last few months — we know that. 


GLOSSARY 


Offshore provider: There are dozens of companies worldwide that specialize in 
selling shell companies. They provide new companies and old, mostly based in 
one of the various tax havens, as well as foundations of all kinds. Many offshore 
providers are law firms. Mossack Fonseca is among the largest of these. 


Registered agent: In most tax havens you cannot simply set up a shell company 
yourself — you need to use an authorized service provider, a ‘registered agent’ 
such as Mossack Fonseca. This agent checks whether the intended company 
name is still available, takes care of the paperwork required by the local 
authorities, then looks after the payment of the annual fees. Normally the official 
address of the shell company is the same as that of the registered agent. That is 
why so many companies registered in Panama have the address Calle 54 Este — 
that is the address of Mossack Fonseca. 


Intermediary: In most cases, a registered agent like Mossack Fonseca would 
not be approached directly by a private individual, but by an asset manager or a 
bank acting on behalf of its clients. 


End client: Mossack Fonseca likes to maintain that it does not do business with 
‘end clients’. It says it only enters into contracts with banks, asset managers and 
lawyers, i.e. intermediaries. That is not the whole truth of the matter, however. 
Mossfon works directly with end clients in many cases, even taking care of their 
banking transactions. 


Shell company: A shell company, or letterbox company, is a company that has 
no employees at its official registered office — which is normally at the address 
of the registered agent — but only a letterbox. This often produces an absurd 
situation in which thousands of firms have their registered office in a single 
building in a tax haven. In the US tax haven of Delaware, for example, over 
200,000 companies are thought to be registered at 1209 North Orange Street. 


Shelf company: A shelf company is a ‘second-hand’ shell company. Offshore 
providers sometimes set up companies that they keep in reserve so that they can 
be sold to clients who need a shell company that does not look as if it has only 
just been established. 


Bearer share: A bearer share is a company share that is not registered in a 
person’s name but belongs to the ‘bearer’. There is no public record of the real 
owner. Whoever has the document in their possession is the official owner of the 
share in the company. Transactions can be performed quickly and easily using 
bearer shares, but they also present opportunities for criminal undertakings. 
Money laundering, for example, can be accomplished quite easily. 


Beneficial owner: The beneficial owner, also often referred to as the ultimate 
beneficial owner, is the real owner of a company — the person who receives the 
‘benefit’. A different person may be named as a partner on paper, but this might 
be purely for show, which is why he or she is referred to as a nominee 
shareholder. 


Nominee shareholder: A nominee shareholder acts as if he/she were the 
shareholder. A nominee shareholder can be a person, but also a company — in 
each case company shares are held in the manner of a trustee. This hides the 
beneficial owner. 


Nominee beneficial owner: A nominee beneficial owner pretends to be the 
ultimate beneficial owner (UBO). If, for example, a bank asks for the name of a 
UBO in order to fulfil its due diligence obligations, the owner of a company may 
provide it with the name of a nominee owner. This person then claims to be the 
owner of the company, which means background checks are conducted only on 
him/her. The real UBO remains hidden. There is a catch to this: the practice 
counts as a criminal act in many places. 


Real ultimate beneficial owner: In the offshore world, the real ultimate 
beneficial owner is the owner of a company who hides behind a front man who 
himself claims to be the ultimate beneficial owner. The term ‘real ultimate 
beneficial owner’ was coined to distinguish the nominee UBO from the real 
UBO. 


Nominee director: A nominee director is a front man or front woman who is 
paid to act as the director of a particular company. In reality, nominee directors 
only do this on paper. All decisions are made by the real owner. If, say, there are 
contracts to be signed, the real owner asks the nominee director to sign them, but 
the nominee director has no further involvement. 


Holding company: A holding company is a company that has no other purpose 
than to hold equity stakes in other companies. If a holding company has its 
registered office in a tax haven, the profits of the subsidiary companies can quite 
easily be transferred to the holding company in order to save on taxes. Holding 
companies also often have a sophisticated multi-layered structure designed to 
hide the identity of the owner. 


Letter of indemnity: A letter of indemnity is an exemption from liability. If a 
client turned out to be conducting illegal business through the shell company, 
this letter ensures that only the client would be liable in the event of any claims 
for damages. 


NOTES 


Prologue 


1 See Chapter 12, particularly for Hans-Joachim K.’s reaction. 


1 Start 1 See Chapters 15 and 30 for further information, particularly regarding Leticia Montoya. 
2 At the time of going to press, Mossfon had not responded to a request for comment. 


2 Vladimir Putin’s mysterious friendi At the time of going to press, Mossfon had not 
responded to a request for comment. 


3 The shadow of the pasti At the time of going to press, neither Mossfon nor Jiirgen Mossack 
had responded to a request for comment. 

2 After having been confronted with the research for this book, Ramon Fonseca announced in March 
2016 that he was taking a leave of absence from both these posts. 

At the time of going to press, Ramon Fonseca had not responded to a request for comment. 

As of March 2016. 

See Chapter 24 for Gunnlaugsson’s reaction. 

See Chapter 24. 

At the time of going to press, Arnoldo ‘Fat Man’ Aléman had not responded to a request for comment. 
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4 Commerzbank and its lies1 At the time of going to press, Burson-Marsteller had not 
commented on these allegations. 

See Chapter 13, especially for Mossack Fonseca’s response to our enquiries. 

It is not clear whether Burson-Marsteller is still working for Mossfon in 2016. 

See Chapter 23, in particular for statements by Commerzbank. 

See Chapter 23, in particular for statements by the banks mentioned. 

See Chapter 23, in particular for statements by the banks mentioned. 

See Chapter 23, in particular for statements by the banks mentioned. 

See Chapter 24, in particular for Gunnlaugsson’s reaction. 
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5 Mossack Fonseca’s role in the Syrian wari At the time of going to press, Hafez 
Makhlouf had not responded to a request for comment. 

At the time of going to press, neither Iyad nor Ihab Makhlouf had responded to a request for comment. 
See Chapter 16, in particular for Zollinger’s reaction. After a request for further information, HSBC 
referred us to an earlier statement saying that it complied ‘worldwide?’ ‘with all applicable sanctions 
laws and regulations’. 

At the time of going to press, Jürgen Mossack had not responded to a request for comment. 

At the time of going to press, John Bredenkamp had not responded to a request for comment. 

At the time of going to press, Jean-Claude N’Da Ametchi had not responded to a request for comment. 
Muller Conrad Rautenbach’s lawyer emphasized that his client had now been removed from both 
sanctions lists. This decision by the EU and the US also covered all companies associated with 
Rautenbach. 

In response to our enquiries, Savo Stjepanovic explained that he had first heard of his having been 
placed on a US sanctions list in the media. He had already requested that his name be deleted from the 
list. He had established the firm run by Mossfon in order to be able to sell mobile phone apps via the 
Google Play store, as this was not possible for Slovenian companies. 
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9 A spokeswoman for Anatoly Ternavsky said that she considered the sanctions to be politically 
motivated. The company managed by Mossfon was still active as of spring 2016. 

10 A law firm mandated by Gennady Timchenko explained that its client ‘is aware of no circumstances 
regarding him and/or the companies mentioned [by us, the Authors] that might justify a breach of 
sanctions by a US citizen’. According to Timchenko’s lawyers, Mossack Fonseca seemed ‘not to have 
the necessary ties to the United States of America to break the sanctions’. 

11 In response to our enquiries, Marllory Dadiana Chacon Rossell and her lawyer did not wish to 

comment on the matter. 

At the time of going to press, Rami Makhlouf had not responded to our enquiries about Drex 

Technologies S.A. 

At the time of going to press, Kuo Oil Pte. Ltd had not responded to a request for comment. 

In response to our enquiries, a lawyer representing Kassim Tajideen stated that his client was neither a 

member nor a supporter of Hezbollah. 

At the time of going to press, Petropars Ltd had not responded to a request for comment. 

At the time of going to press, John Bredenkamp had not responded to a request for comment. 

See Chapter 22, in particular for Yulia Tymoshenko’s statement. 

See Chapter 22, in particular for the lack of response from Pavel Lazarenko. 

In response to our enquiries, a law firm representing Suleiman Marouf stated that the earlier sanctions 

against its client were based on ‘false and unsubstantiated allegations’. 

At the time of going to press, the law firm representing Suleiman Marouf had not responded to our 

further enquiries about Marouf’s suspected activities on Asma al-Assad’s behalf. 

At the time of going to press, neither Maxima Middle East Trading Co. nor Ahmad Barqawi had 

responded to a request for comment. 

At the time of going to press, Pangates International Corporation Ltd had not responded to a request 

for comment. 

23 At the time of going to press, Mossack Fonseca had not responded to a request for comment. 
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6 From the Waffen-SS to the CIA and Panama1 See Chapter 25, in particular for the 
lack of response from Dabaiba. 


7 The football factory1 For Figueredo’s response, see Chapter 28. 
We were unable to reach Hugo and Mariano Jinkis to ask for their response to this allegation. 
We were unable to reach Hugo and Mariano Jinkis to ask for their response to this allegation. 
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8 On fishing, finding and fine arti At the time of going to press, Helly Nahmad had not 
responded to a request for comment. 


9 A view of the White House 1 At the time of going to press, Alaa Mubarak had not responded 


to a request for comment. 
2 See Chapter 5 for Mossfon statements concerning dealing with sanctioned persons. 


10 Sparks fly 1 At the time of going to press, neither Prime Minister Nawaz Sharif nor his daughter 
had responded to a request for comment. 

2 At the time of going to press, Prime Minister Nawaz Sharif had not responded to a request for 
comment. 

See also Chapter 24, particularly regarding Prime Minister Gunnlaugsson’s response. 

See also Chapter 5. 
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When contacted by the ICIJ, Ayad Allawi confirmed that he is the ‘only director and shareholder’ of 
Foxwood Estates Ltd, Moonlight Estates Ltd and IMF Holdings Inc. He also claimed that IMF 
Holdings had been established in order to hold property, and that any taxes due had been paid on time. 
See also Chapter 21, particularly regarding Deng Jiagui’s failure to respond. 

See also Chapter 21, particularly regarding Li Xiaolin’s failure to respond. 

Rostec, of which Sergey Chemezov is CEO, confirmed that Chemezov’s son is the beneficiary of a 
company. Rostec did not give the name of the company. 

At the time of going to press, Boris and Arkady Rotenberg had not responded to a request for 
comment. 
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11 Fear and trepidation 1 At the time of going to press, neither Ilham Aliyev nor his family had 
responded to a request for comment. 


12 The Siemens millions 1 When we questioned him about this, K. did not answer. 

When we questioned him about this, K. did not answer. 

At the time of going to press, Jiirgen Mossack had not responded to a request for comment. 

When we questioned him about this, K. did not answer. L.L. denies that any of the events we describe 
here took place. 

K. denies the meeting took place. 

L.L. explained on the phone that he has never received money from Gillard Management. He says he 
hasn’t even heard of the company. 

K. denies ever transferring this money. 

‘RPS’ did not respond to our query. 
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13 ‘Regarding my meeting with Harry Potter...’ 

At the time of going to press, neither Jürgen Mossack nor Ramón Fonseca had responded to a request 
for comment. 

At the time of going to press, Mossfon had not responded to a request for comment. 

A lawyer initially responded to our query by requesting more time to answer. Then, a week later, he 
simply said that the Siemens director had no knowledge of these transactions. He finally wrote, saying 
that his client could give ‘no information’ in answer to our queries. 

At the time of going to press, Mossfon had not responded to a request for comment. 

At the time of going to press, Mossfon had not responded to a request for comment. 
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14 A secret meeting with Alpine views 1 At the time of going to press, Boris and Arkady 

Rotenberg had not responded to a request for comment. 

2 A lawyer appointed by Usmanov explained that his client’s ‘most important operating companies’ are 
registered in Russia. Foreign companies are used ‘on a very limited basis’ and ‘in strict compliance 

with the law’. 

When questioned by the OCCRP, the company Rostec (of which Sergey Chemezov is CEO) confirmed 

the connection between Chemezov’s son and Svyazdorinvest and stated that the problem had been 

resolved internally. 
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15 Mossfon Holdings 1 At the time of going to press, neither Jiirgen Mossack nor Mossfon had 
responded to a request for comment. 

When asked, Christoph Zollinger denied having been a shareholder of Tornbell Associates. 

Later, Montoya clearly earned significantly more. At the end of 2015, we find a current document that 
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states that she earns $10,800 per year. The imbalance compared to the revenue that Mossfon makes 
from her only changes marginally as a result. 

At the time of going to press, Jiirgen Mossack had not responded to a request for comment. 

At the time of going to press, Jiirgen Mossack had not responded to a request for comment. 

At the time of going to press, Peter Mossack had not responded to new enquiries. 
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16 Spirit of Panamaı All ownership structures stated here reflect the status in mid-2015, as 
shown in the data. 


17 The world is not enough 1 Atthe time of going to press, Baldernach had not responded to a 
request for comment. 

Quote taken from: Nicholas Shaxson, Treasure Islands (Vintage Books: London), 2012. 

At the time of going to press, Sanford I. Weill had not responded to a request for comment. 

At the time of going to press, Al Nahyan had not responded to a request for comment. 

When asked, Helmut Linssen confirmed that the companies Longdown Properties Corp. (Bahamas) 
and Longdown Properties Corp. (Panama) had belonged to him. He stated that he was unfamiliar with 
Mossack Fonseca and that his business partner had been HSBC Trinkaus. 
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18 The looting machine 1 At the time of going to press, Kabila’s sister had not responded to a 

request for comment. 

At the time of going to press, Teodoro Obiang had not responded to a request for comment. 

At the time of going to press, we had not been able to reach Martina Chissano for her comments. 

At the time of going to press, we had not been able to reach Hastings Banda’s niece, Mapopa Chipeta 

or Yusuf Mwawa for their comments. 

When questioned by Le Monde, Bruno Itoua replied that he does not comment on financial matters. 

At the time of going to press, José Maria Botelho de Vasconcelos had not responded to a request for 

comment. 

When questioned, a PR agency explained that Caprikat and Foxwhelp are fully owned by the Fleurette 

Group. When the contract was concluded, Caprikat and Foxwhelp did in fact pay a total of $6 million 

to the Democratic Republic of the Congo. In addition, $2.5 million was provided for the exploration 

permit. According to the information provided, approximately 60 per cent of oil revenues went to the 

state. 

At the time of going to press, neither Jacob Zuma, Khulubuse Zuma nor Joseph Kabila had responded 

to a request for comment. 

When questioned, a spokesperson confirmed that Caprikat and Foxwhelp are fully owned by the 

Fleurette Group, which in turn is held as a ‘discretionary trust to the family of Dan Gertler’. 

10 When questioned, Frédéric Cilins did not wish to comment on this matter. BSGR said that Cilins 
hadn’t ‘bribed anyone on the order of BSGR’. 
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11 When questioned, a spokesperson from BSGR explained that he had never heard of a company by the 
name of Matinda. 

12 At the time of going to press, BSGR had not responded to a request for comment. 

13 When questioned, a spokesperson for BSGR explained that there was ‘strong evidence’ that Touré 
wasn’t the fourth wife of Conté; he didn’t elaborate on the matter. 

14 When questioned, a spokesperson for BSGR disputed this. 

15 When questioned, a spokesperson for BSGR disputed this. 

16 When questioned, BSGR repeated that Onyx was independent of BSGR. At the time of going to press, 
Onyx had not responded to a request for comment. 

17 A spokesperson for BSGR explained that Cilins had not acted on behalf of either BSGR or Beny 


Steinmetz himself. At the time of going to press, Beny Steinmetz had not responded to a request for 
comment. 

A spokesperson for BSGR commented that they did not know anything else about this. 

At the time of going to press, Onyx had not responded to a request for comment. 
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19 Secret meetings in the Komitérom1 For further information on this, in particular with 
regard to the response by Ramses Owens, see Chapter 30. 

For further information about Ramses Owens and his response to the accusations, see Chapter 30. 

At the time of going to press, Edmund W. had not responded to a request for comment. 

At the time of going to press, Mossack Fonseca had not responded to a request for comment regarding 
this particular case. 
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20 At the mercy of monstersi As of March 2016. 

2 When questioned, Andrew M. explained that he had never been involved with the operation of 
Berenika, invested any money in it or had any share in its profits. 

3 Andrew M. responded to corresponding enquiries. He didn’t want to speak publicly about the company 
Ifex Global, but sent his response from an email address that ended @ifex.us. 

4 When questioned, Andrew M. explained that the allegation that he’d been part of the Berenika ring 
was ‘completely and utterly false’ and based on a ‘tall story’ concocted by the Russian authorities. 
According to Andrew M., the aim of it all was to ruin his reputation, as he was a critic of Putin. He 
added that he had never invested in the child prostitution ring, nor had he profited from it financially. 
He didn’t explicitly deny having had sex with minors. 


21 The red nobility 1 Atthe time of going to press, neither Deng Jiagui nor Xi Jinping had 
responded to a request for comment. 

At the time of going to press, Li Xiaolin had not responded to a request for comment. 

At the time of going to press, Wallace Yu Yiping had not responded to a request for comment. 
At the time of going to press, Lee Shing Put had not responded to a request for comment. 

At the time of going to press, Zeng Qinghuai had not responded to a request for comment. 
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22 The Gas Princess and the Chocolate King 1 In fact, his adviser has since announced 

that the rates are currently too low and the president hasn’t yet sold his companies because he didn’t want to 

squander the money. When questioned, the president’s press office explained that Prime Assets Partners Ltd 

is ‘part of the process’ of transferring Petro Poroshenko’s money into a trust. Recently, Poroshenko made 

public ‘all information regarding his assets, expenditure and income’. 

2 At the time of going to press, neither Gennadiy Trukhanov nor the son of Mykola Azarov had 
responded to a request for comment. 


23 Those German banks 1 __ Deutsche Bank, when asked to comment, said that it ‘never provides 

information about possible or actual business relationships’. 

2 Commerzbank stated, when asked to comment, that it could ‘not comment on potential and actual 
client relationships’, but that from 2008 Commerzbank International S.A. ‘implemented a strict clean 
money strategy’. 


3 DZ Bank stated on enquiry that it had ‘never actively offered clients shell companies’. Recently the 
bank has ‘been systematically dissociating itself from clients who have not displayed the requisite tax 
transparency’. 

4 HypoVereinsbank said that it could not give ‘any further information beyond that which is publicly 
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available — in particular the annual reports of UniCredit Luxembourg S.A.’. 

LBBW informed us that it was prompted by ‘press reports on other institutions? dealings with so-called 
offshore companies’ to ‘take a closer look’ at the past business activities of the former Landesbank 
Rheinland-Pfalz International S.A. (LRI), which was a subsidiary of LBBW from 2008 to 2010. 
However, in view of its ongoing investigations, the bank could ‘not comment further on this matter’. 
BayernLB, responding to our enquiry, said it ‘goes without saying’ that it does not offer shell 
companies. It said it could ‘not find out at the present time, due in part to Luxembourg banking 
secrecy’ whether the subsidiary LBLux, which has since ceased trading, set up the individual offshore 
companies that we quoted by name. However, it had decided ‘to review the matter’. 

Deutsche Bank, when asked to comment, said that it ‘never provides information about possible or 
actual business relationships’. 

Deutsche Bank, when asked to comment, said that it ‘never provides information about possible or 
actual business relationships’. 

Deutsche Bank, when asked to comment, said that it ‘never provides information about possible or 
actual business relationships’. 

Deutsche Bank, when asked to comment, said the website had been redesigned in 2013 and can now be 
found at www.db-ci.com. 

Deutsche Bank, when asked to comment, said that the US Justice Department had come to a non- 
prosecution agreement with Deutsche Bank (Switzerland) AG. The US Justice Department had agreed 
not pursue a criminal prosecution against Deutsche Bank (Switzerland) AG ‘in connection with 
possible tax law violations by undeclared US accounts managed by Deutsche Bank (Switzerland) AG’. 
However, it had to pay ‘a fine of around $31 million’. 

Deutsche Bank, when asked to comment, said it ‘never gives information’ about possible or actual 
preliminary investigations. 

Deutsche Bank, when asked to comment, said that it ‘never provides information about possible or 
actual business relationships’. 

Commerzbank said, when asked to comment, that ‘from 2008, Commerzbank International S.A. 
systematically and proactively redirected the business without any external regulatory compulsion’. It 
said the public prosecutor’s office had ‘welcomed’ this. 

UBS’s official statement reads: ‘This business is integrated into UBS’s local German business and is 
entirely subject to German regulation and German law.’ 

A UBS spokesperson said, when asked to comment, that ‘for legal and regulatory reasons’ she was 
unable ‘to comment on individual persons, companies or supposed customer relationships’. She said, 
however, that UBS had been ‘explicitly telling its customers for a long time that they need to resolve 
their tax situation’. 

BayernLB, responding to our enquiry, said it ‘goes without saying’ that it does not offer shell 
companies. It said it could ‘not find out at the present time, due in part to Luxembourg banking 
secrecy’ whether the subsidiary LBLux, which has since ceased trading, set up the individual offshore 
companies that we quoted by name. However, it had decided ‘to review the matter’. 

BHF Bank said, when asked to comment, that the information in our possession was ‘largely 
incorrect’, but that it was unable to discuss any details without breaching banking secrecy. DZ Bank 
informed us that the investment companies the bank currently has in its portfolio are ‘demonstrably 
tax-compliant’. Commerzbank did not respond to an enquiry concerning the ship mortgage bank 
associated with it, other than to say that ‘the business purpose of Deutsche Schiffsbank AG was to 
finance maritime shipping’. HSBC had not replied to our enquiry on this subject at the time of going to 
press. 

Berenberg Bank said, when asked to comment, that it was trying ‘insofar as we are able’ to ensure 
‘that clients meet their tax obligations’. There had been ‘a significant change’, it said, in attitudes 
towards ‘this issue’ among citizens, lawmakers and banks in recent years. 

Berenberg Bank stated, when asked to comment, that the ‘creation and marketing of shell companies 


[. . .] was never part’ of its business model. Berenberg and its subsidiaries had ‘never actively offered 
or marketed shell companies’. 

Berenberg Bank said, when asked to comment, that ‘for reasons of banking secrecy and data 
protection’ it was unable to comment on this matter. However, it said, Berenberg Bank (Switzerland) 
AG knows and documents ‘the associated beneficial owners for all accounts that it manages’. 

Deutsche Bank, when asked to comment, said that it ‘never provides information about possible or 
actual business relationships’. 


24 A raid by the Vikings of finance 1 For Bjarni Benediktsson and Ólöf Nordal’s responses, 
see the second half of Chapter 24. 
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Shortly before the copy deadline for this book, the prime minister’s wife said the bank had made a 
mistake when, in 2007, it entered her current husband’s name as shareholder. It had always been her 
company, she said. 

At the time of going to press, Sigmundur Gunnlaugsson had not responded to a request for comment 
on this subject. 

The fact that the prime minister’s wife said they no longer invested in Icelandic stocks after her 
husband became a politician, i.e. in early 2009, weighs in favour of this version of events. 

At the time of going to press, Sigmundur Gunnlaugsson had not responded to a request for comment 
on this subject. 

When asked, Benediktsson confirmed that he had been one of the owners of the company. It had held a 
property in Dubai, and he had declared both these facts, he said. Asked why he had claimed never to 
have held assets in offshore companies, he explained that he had ‘not been aware’ that the company 
was registered in the Seychelles. 

Benediktsson said he had not been opposed to the purchase. He told our colleague Jóhannes 
Kristjánsson that he had not known that his company appeared in the data. 

Asked about this, Ólöf Nordal’s husband got in touch and explained that Landsbanki set up the 
company for him, but that it had not been used. Ólöf Nordal herself told us the company had been set 
up before she entered parliament, which is why she had not declared it. 


25 Dead-end trails 1 Shortly before the copy deadline for this book, Argentina apparently reached 
an agreement with NML. This presumably makes the charges obsolete. 
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At the time of going to press, Ali Dabaiba had not responded to a request for comment. 

At the time of going to press, Ali Dabaiba had not responded to a request for comment. 

At the time of going to press, Ali Dabaiba had not responded to a request for comment. 

At the time of going to press, Riad G. had not responded to a request for comment. 

At the time of going to press, the two businessmen had not responded to a request for comment. Nor 
had the managers of the hotel in the Scottish Highlands. 

At the time of going to press, neither Riad G. nor Ali Dabaiba had responded to a request for comment. 


26 United by marriage, united by money1 At the time of going to press, Jiirgen Mossack 
had not responded to a request for comment. 
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At the time of going to press, Arkady and Boris Rotenberg had not responded to a request for 
comment. 

A law firm engaged by Gennady Timchenko said — without mentioning specific companies prior to 
this book’s copy deadline — that Timchenko was not aware of any circumstances that constituted a 
sanctions violation by a US person. 


27 Star, star, Mega Stari ‘The Messi family did give a public statement, reported in UK 


newspaper the Mirror on 4 April 2016, stating: ‘the Panamian company referred to in the reports is a 
completely inactive company, which never held open accounts nor funds and which comes from the former 
company structure put in place by Messi’s previous financial advisers, the fiscal consequences of which 
have already been normalised, with all the income that comes from exploitation of his image rights, prior to 
and after the procedure carried out in the courts, having been declared before the Spanish Treasury.’ 


28 The fourth man and FIFA 1 Hugo and Mariano Jinkis were not available to respond to a 
joint enquiry by us and the ICIJ before the copy deadline for this book. 

2 Hugo and Mariano Jinkis were not available to respond to a joint enquiry by us and the ICIJ before the 
copy deadline for this book. 

At the time of going to press, Juan Pedro Damiani had not responded to a request for comment. 

At the time of going to press, Juan Pedro Damiani had not responded to a request for comment. 

At the time of going to press, Juan Pedro Damiani, Eugenio Figueredo and Mossack Fonseca had not 
responded to a request for comment. 


lun | [vo 


29 The 99 per cent and the future of tax havens1 Nicholas Shaxson, Treasure Islands 

(Vintage Books: London), 2012. 

2 Michael G. Findley, Daniel L. Nielson, J.C. Sharman, Global Shell Games (Cambridge University 
Press: Cambridge), 2014. 


30 The cold heart of the offshore world1 Leticia Montoya did not respond to a subsequent 
written enquiry before the copy deadline for this book. Instead a Mossfon spokesman sent a general 
statement saying that a person can be the director of several companies. Our detailed questions went 
unanswered. 

2 Responding to a written enquiry, Ramses Owens informed us several days after the interview that he 
had ‘never’ provided a ‘nominee beneficial owner’ service. Confronted with the content of a letter sent 
by him that talks about how Mossfon is providing the nominee beneficial owner for a company, Owens 
replied that it should have read ‘nominee shareholder’ or ‘shareholder trusteeship’, in other words it 
was a Clerical error. Asked whether he was sure about this, considering there were several such 
documents, Owens did not reply before the copy deadline for this book. 


